Medium · 4.8 CVE-2021-36869 EUVD-2021-23445GHSA-5g3x-85qh-f5cx

WordPress Ivory Search plugin <= 4.6.6 - Reflected Cross-Site Scripting (XSS) vulnerability

Published Oct 21, 2021 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Reflected Cross-Site Scripting (XSS) vulnerability in WordPress Ivory Search plugin (versions <= 4.6.6). Vulnerable parameter: &post.

Vendor	Product	Affected	Fixed
Ivory Search	Ivory Search (WordPress plugin)	<= 4.6.6 – ≤ 4.6.6	—