Skip to content
OpenAdvisories

Vendor

Damian Góra

7 known vulnerabilities.

Products

FiboSearch 3 FiboSearch – Ajax Search for WooCommerce 3 Justified Gallery 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-100106

    FiboSearch <= 1.34.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'purchased_plan' Parameter

    The FiboSearch – Ajax Search for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'purchased_plan' parameter in all versions up to, and including, 1.34.2 due to insufficient input sanitization and output escaping. This mak…

    Damian Góra FiboSearch – Ajax Search for WooCommerce Web / CMS
  • Medium 5.9
    CVE-2026-28179

    WordPress FiboSearch plugin <= 1.33.0 - Cross Site Scripting (XSS) vulnerability

    Shop manager Cross Site Scripting (XSS) in FiboSearch <= 1.33.0 versions.

    Damian Góra FiboSearch
  • Medium 6.1
    CVE-2024-13362

    Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

    Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject …

    bPlugins webfactory unitecms nicheaddons Web / CMS
  • Medium 5.4
    CVE-2025-14298

    FiboSearch – Ajax Search for WooCommerce <= 1.32.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via thegem_te_search Shortcode

    The FiboSearch – Ajax Search for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `thegem_te_search` shortcode in all versions up to, and including, 1.32.0 due to insufficient input sanitization and output escapin…

    Damian Góra FiboSearch – Ajax Search for WooCommerce Web / CMS
  • Medium 5.3
    CVE-2025-47444

    WordPress FiboSearch plugin <= 1.32.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Damian Góra FiboSearch ajax-search-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FiboSearch: from n/a through <= 1.32.1.

    Damian Góra FiboSearch
  • Medium 4.4
    CVE-2023-2450

    The FiboSearch - AJAX Search for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admi…

    Damian Góra FiboSearch – Ajax Search for WooCommerce Web / CMS