Search Exclude

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-36282 Aug 23, 16:15 MEDIUM PATCH This Month

Authenticated (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Roman Pronskiy's Search Exclude plugin <= 1.2.6 at WordPress. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity.

WordPress XSS Wordpress Plugin Search Exclude

NVD

CVSS 3.1

5.4

EPSS

0.4%

CVE-2019-15895 Sep 09, 13:15 HIGH This Week

search-exclude.php in the "Search Exclude" plugin before 1.2.4 for WordPress allows unauthenticated options changes. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP WordPress Authentication Bypass Wordpress Plugin Search Exclude

NVD

CVSS 3.1

7.5

EPSS

1.7%

CVE-2022-36282

EPSS 0% CVSS 5.4

MEDIUM PATCH This Month

WordPress XSS Wordpress Plugin +1

NVD

CVE-2019-15895

EPSS 2% CVSS 7.5

HIGH This Week

PHP WordPress Authentication Bypass +2

NVD