Skip to content
OpenAdvisories

Vendor

vinod-dalvi

8 known vulnerabilities.

Products

Ivory Search – WordPress Search Plugin 5 Login Logout Register Menu 2 Ivory Search 1
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-92243

    Ivory Search <= 5.5.18 - Reflected DOM-Based Cross-Site Scripting via 's' Parameter

    The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 5.5.18 due to insufficient input sanitization and output escaping. This makes it possib…

    vinod-dalvi Ivory Search – WordPress Search Plugin Web / CMS
  • Medium 4.4
    CVE-2026-11356

    Ivory Search <= 5.5.15 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'menu_title' and 'menu_magnifier_color' Settings

    The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'menu_title' and 'menu_magnifier_color' Settings in all versions up to, and including, 5.5.15 due to insufficient input sanitization and output es…

    vinod-dalvi Ivory Search – WordPress Search Plugin Web / CMS
  • Medium 4.4
    CVE-2026-1053

    Ivory Search <= 5.5.13 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'menu_gcse' and 'nothing_found_text' Parameters

    The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 5.5.13 due to insufficient input sanitization and output escaping. This makes it possible for…

    vinod-dalvi Ivory Search – WordPress Search Plugin Web / CMS
  • Medium 5.3
    CVE-2025-63069

    WordPress Ivory Search plugin <= 5.5.12 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Vinod Dalvi Ivory Search add-search-to-menu allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ivory Search: from n/a through <= 5.5.12.

    vinod-dalvi Ivory Search
  • Medium 5.3
    CVE-2024-6835

    Ivory Search – WordPress Search Plugin <= 5.5.6 - Information Exposure via AJAX Search Form

    The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 5.5.6 via the ajax_load_posts function. This makes it possible for unauthenticated attackers to extract text data from …

    vinod-dalvi Ivory Search – WordPress Search Plugin Web / CMS
  • Medium 6.4
    CVE-2024-3726

    Login Logout Register Menu <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'llrmloginlogout' Shortcode

    The Login Logout Register Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'llrmloginlogout' shortcode in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping on user supplied…

    vinod-dalvi Login Logout Register Menu Web / CMS
  • Medium 6.5
    CVE-2024-33932

    WordPress Login Logout Register Menu plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vinod Dalvi Login Logout Register Menu allows Stored XSS.This issue affects Login Logout Register Menu: from n/a through 2.0.

    vinod-dalvi Login Logout Register Menu
  • Medium 4.3
    CVE-2024-3233

    Ivory Search – WordPress Search Plugin <= 5.5.5 - Missing Authorization to Authenticated (Subscriber+) Index Creation

    The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_create_index() function in all versions up to, and including, 5.5.5. This makes it possible for au…

    vinod-dalvi Ivory Search – WordPress Search Plugin Web / CMS