Vinod-Dalvi
6 CVEs across 2 Vinod-Dalvi products. Browse Vinod-Dalvi vulnerabilities, severities, and proof-of-concept exploits.
Vinod-Dalvi products with known CVEs
Vinod-Dalvi CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-11356 | Medium | 4.4 | 2026-06-27 | The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'menu_title' and 'menu_magnifier_color' Settin… |
CVE-2024-13362 | Medium | 6.1 | 2026-05-01 | Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient inp… |
CVE-2026-1053 | Medium | 4.4 | 2026-01-28 | The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and incl… |
CVE-2022-4974 | Medium | 6.3 | 2024-10-16 | The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to… |
CVE-2024-6835 | Medium | 5.3 | 2024-09-05 | The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 5.5.6 via the ajax_… |
CVE-2024-3726 | Medium | 6.4 | 2024-05-30 | The Login Logout Register Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'llrmloginlogout' shortcode in all versions u… |
CVE-2024-3233 | Medium | 4.3 | 2024-05-02 | The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the aja… |