Description
Nonce token leakage and missing authorization in SearchWP premium plugin <= 4.2.5 on WordPress leading to plugin settings change.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SearchWP | SearchWP | <= 4.2.5 – ≤ 4.2.5 | — |
Medium · 5.4
CVE-2022-40223
EUVD-2022-43521GHSA-fqqv-r25w-2p97
WordPress SearchWP premium plugin <= 4.2.5 - Broken Authentication vulnerability
Published Nov 8, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack