GCVE - cpe:2.3:a:codesolz:better_find_and_replace:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:codesolz:better_find_and_replace:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Codesolz (`392a8916-01d4-527f-b3b0-1e3f3da43f37`)
Product	Better Find And Replace (`661aa020-d9cc-5163-9044-ee1cb9117077`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/codesolz/real-time-auto-find-and-replace`	purl2cpe	2026-06-01 10:11:51.015379

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-53466`	vulnerable	2026-06-08 07:31:14.578396	WordPress Better Find and Replace Plugin <= 1.7.6 - Cross Site Scripting (XSS) Vulnerability MEDIUM (5.9) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodeSolz Better Find and Replace real-time-auto-find-and-replace allows Stored XSS.This issue affects Better Find and Replace: from n/a through <= 1.7.6. Published: 2025-09-22T18:25:33.335Z Updated: 2026-04-28T16:13:25.903Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/real-time-auto-find-and-replace/vulnerability/wordpress-better-find-and-replace-plugin-1-7-6-cross-site-scripting-xss-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-24734`	vulnerable	2026-06-08 07:12:49.814280	WordPress Better Find and Replace plugin <= 1.6.7 - Privilege Escalation vulnerability HIGH (8.8) Missing Authorization vulnerability in CodeSolz Better Find and Replace real-time-auto-find-and-replace allows Privilege Escalation.This issue affects Better Find and Replace: from n/a through <= 1.6.7. Published: 2025-01-27T14:22:18.175Z Updated: 2026-04-28T16:11:33.239Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/real-time-auto-find-and-replace/vulnerability/wordpress-better-find-and-replace-plugin-1-6-7-privilege-escalation-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-39636`	vulnerable	2026-06-08 06:41:51.254339	WordPress Better Find and Replace plugin <= 1.6.1 - PHP Object Injection vulnerability HIGH (8.3) Deserialization of Untrusted Data vulnerability in CodeSolz Better Find and Replace.This issue affects Better Find and Replace: from n/a through 1.6.1. Published: 2024-08-01T21:24:14.595Z Updated: 2026-04-28T16:10:07.633Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/real-time-auto-find-and-replace/wordpress-better-find-and-replace-plugin-1-6-1-php-object-injection-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.