Search Everything

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2014-3843 May 22, 15:13 MEDIUM This Month

Cross-site request forgery (CSRF) vulnerability in the Search Everything plugin before 8.1.1 for WordPress allows remote attackers to hijack the authentication of unspecified victims via unknown. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. No vendor patch available.

WordPress CSRF Wordpress Plugin Search Everything Zemanta

NVD

CVSS 2.0

6.8

EPSS

0.1%

CVE-2014-2316 Mar 09, 13:16 HIGH This Week

SQL injection vulnerability in se_search_default in the Search Everything plugin before 7.0.3 for WordPress allows remote attackers to execute arbitrary SQL commands via the s parameter to index.php. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP WordPress SQLi Wordpress Plugin Search Everything +1

NVD VulDB

CVSS 2.0

7.5

EPSS

0.8%

CVE-2014-3843

EPSS 0% CVSS 6.8

MEDIUM This Month

WordPress CSRF Wordpress Plugin +2

NVD

CVE-2014-2316

EPSS 1% CVSS 7.5

HIGH This Week

PHP WordPress SQLi +3

NVD VulDB