Lucene search

K
patchstackMuhammad Daffa (Patchstack Alliance)PATCHSTACK:A56D2E14BCEABC94F662D57D1000112A
HistoryAug 22, 2022 - 12:00 a.m.

WordPress Search Exclude plugin <= 1.2.6 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

2022-08-2200:00:00
Muhammad Daffa (Patchstack Alliance)
patchstack.com
9

0.001 Low

EPSS

Percentile

22.7%

Authenticated Stored Cross-Site Scripting (XSS) vulnerability discovered by Muhammad Daffa (Patchstack Alliance) in WordPress Search Exclude plugin (versions <= 1.2.6).

Solution

           Update the WordPress Search Exclude plugin to the latest available version (at least 1.2.7).
CPENameOperatorVersion
search excludele1.2.6

0.001 Low

EPSS

Percentile

22.7%

Related for PATCHSTACK:A56D2E14BCEABC94F662D57D1000112A