vinod-dalvi vulnerabilities

CVEs per yearBy the year they were published

1. 20244
2. 20264

Newest CVEs

• CVE-2026-92243

  Ivory Search <= 5.5.18 - Reflected DOM-Based Cross-Site Scripting via 's' Parameter

  vinod-dalvi · Ivory Search – WordPress Search Plugin

  Medium6.1
• CVE-2026-11356

  Ivory Search <= 5.5.15 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'menu_title' and 'menu_magnifier_color' Settings

  vinod-dalvi · Ivory Search – WordPress Search Plugin

  Medium4.4
• CVE-2024-13362

  Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

  sebet · Go Fetch Jobs (for WP Job Manager)

  Medium6.1
• CVE-2026-1053

  Ivory Search <= 5.5.13 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'menu_gcse' and 'nothing_found_text' Parameters

  vinod-dalvi · Ivory Search – WordPress Search Plugin

  Medium4.4
• CVE-2022-4974

  Freemius SDK <= 2.4.2 - Missing Authorization Checks

  dashlabsltd · YASR – Yet Another Star Rating Plugin for WordPress

  Medium6.3
• CVE-2024-6835

  Ivory Search – WordPress Search Plugin <= 5.5.6 - Information Exposure via AJAX Search Form

  vinod-dalvi · Ivory Search – WordPress Search Plugin

  Medium5.3
• CVE-2024-3726

  Login Logout Register Menu <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'llrmloginlogout' Shortcode

  vinod-dalvi · Login Logout Register Menu

  Medium6.4
• CVE-2024-3233

  Ivory Search – WordPress Search Plugin <= 5.5.5 - Missing Authorization to Authenticated (Subscriber+) Index Creation

  vinod-dalvi · Ivory Search – WordPress Search Plugin

  Medium4.3