Critical · 9.8 CVE-2025-62064 EUVD-2025-38069GHSA-v2pc-r36h-f9fx

WordPress Search & Go theme <= 2.7 - Broken Authentication vulnerability

Published Nov 6, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Elated-Themes Product: Search & Go

Description

Authentication Bypass Using an Alternate Path or Channel vulnerability in Elated-Themes Search & Go search-and-go allows Password Recovery Exploitation.This issue affects Search & Go: from n/a through <= 2.7.

Affected products

Vendor	Product	Affected	Fixed
Elated-Themes	Search & Go	≤ 2.7	—

References

https://patchstack.com/database/Wordpress/Theme/search-and-go/vulnerability/wordpress-search-go-theme-2-7-broken-authentication-vulnerability?_s_id=cve vdb-entry