Lucene search

K

Relevant Security Vulnerabilities

cve
cve

CVE-2024-29142

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebberZone Better Search – Relevant search results for WordPress allows Stored XSS.This issue affects Better Search – Relevant search results for WordPress: from n/a through...

7.1CVSS

9.2AI Score

0.0004EPSS

2024-03-19 02:15 PM
53
cve
cve

CVE-2021-4400

The Better Search plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.5.2. This is due to missing or incorrect nonce validation on the bsearch_process_settings_import() and bsearch_process_settings_export() functions. This makes it possible for...

4.3CVSS

4.3AI Score

0.001EPSS

2023-07-01 06:15 AM
36
cve
cve

CVE-2021-4373

The Better Search plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.5.2. This makes it possible for unauthenticated attackers to import settings via forged request granted they can trick a site administrator into performing an action such as...

8.8CVSS

4.4AI Score

0.001EPSS

2023-06-07 02:15 AM
12
cve
cve

CVE-2014-125102

A vulnerability classified as problematic was found in Bestwebsoft Relevant Plugin up to 1.0.7 on WordPress. Affected by this vulnerability is an unknown functionality of the component Thumbnail Handler. The manipulation leads to information disclosure. The attack can be launched remotely....

7.5CVSS

7.4AI Score

0.001EPSS

2023-05-29 11:15 PM
19
cve
cve

CVE-2015-9384

The relevant plugin before 1.0.8 for WordPress has...

6.1CVSS

6.4AI Score

0.001EPSS

2019-09-20 03:15 PM
26
cve
cve

CVE-2017-2171

Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version 1.0.5, Contact Form Multi prior to version 1.2.1, Contact Form prior to version 4.0.6, Contact Form to DB prior to version 1.5.7, Custom Admin Page prior to version 0.1.2, Custom Fields Search prior...

6.1CVSS

6.1AI Score

0.001EPSS

2017-05-22 04:29 PM
33
cve
cve

CVE-2010-4775

The Relevant Content module 5.x before 5.x-1.4 and 6.x before 6.x-1.5 for Drupal does not properly implement node access logic, which allows remote attackers to discover restricted node titles and...

7AI Score

0.006EPSS

2011-03-23 10:00 PM
19