Search Exclude

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-36282 MEDIUM PATCH This Month

Authenticated (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Roman Pronskiy's Search Exclude plugin <= 1.2.6 at WordPress. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity.

XSS WordPress Search Exclude

NVD

CVSS 3.1

5.4

EPSS

0.4%

CVE-2019-15895 HIGH This Week

search-exclude.php in the "Search Exclude" plugin before 1.2.4 for WordPress allows unauthenticated options changes. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass WordPress PHP Search Exclude

NVD

CVSS 3.1

7.5

EPSS

1.7%

CVE-2022-36282

EPSS 0% CVSS 5.4

MEDIUM PATCH This Month

XSS WordPress Search Exclude

NVD

CVE-2019-15895

EPSS 2% CVSS 7.5

HIGH This Week

Authentication Bypass WordPress PHP +1

NVD