Description
Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in TC Ultimate WP Query Search Filter plugin <= 1.0.10 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| TC | Ultimate WP Query Search Filter | ≤ 1.0.10 | — |
Medium · 6.5
CVE-2023-23832
EUVD-2023-27918GHSA-3957-gqh2-v47w
WordPress Ultimate WP Query Search Filter Plugin <= 1.0.10 is vulnerable to Cross Site Scripting (XSS)
Published Apr 23, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack