vinod-dalvi vulnerabilities
8 published CVEs name vinod-dalvi among the affected products.
- 8Published CVEs8 of them scored
- 4Last 12 monthspublished in the last year
- 0Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-92243
Ivory Search <= 5.5.18 - Reflected DOM-Based Cross-Site Scripting via 's' Parameter
vinod-dalvi · Ivory Search – WordPress Search Plugin
Medium6.1 - CVE-2026-11356
Ivory Search <= 5.5.15 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'menu_title' and 'menu_magnifier_color' Settings
vinod-dalvi · Ivory Search – WordPress Search Plugin
Medium4.4 - CVE-2024-13362
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter
sebet · Go Fetch Jobs (for WP Job Manager)
Medium6.1 - CVE-2026-1053
Ivory Search <= 5.5.13 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'menu_gcse' and 'nothing_found_text' Parameters
vinod-dalvi · Ivory Search – WordPress Search Plugin
Medium4.4 - CVE-2022-4974
Freemius SDK <= 2.4.2 - Missing Authorization Checks
dashlabsltd · YASR – Yet Another Star Rating Plugin for WordPress
Medium6.3 - CVE-2024-6835
Ivory Search – WordPress Search Plugin <= 5.5.6 - Information Exposure via AJAX Search Form
vinod-dalvi · Ivory Search – WordPress Search Plugin
Medium5.3 - CVE-2024-3726
Login Logout Register Menu <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'llrmloginlogout' Shortcode
vinod-dalvi · Login Logout Register Menu
Medium6.4 - CVE-2024-3233
Ivory Search – WordPress Search Plugin <= 5.5.5 - Missing Authorization to Authenticated (Subscriber+) Index Creation
vinod-dalvi · Ivory Search – WordPress Search Plugin
Medium4.3