Approved changes feed: RSS · Atom

cpe:2.3:a:ivorysearch:ivory_search:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIvorysearch (fd0d77d7-3479-5c16-803f-c841ec5ca547)
ProductIvory Search (e6be3450-5ffa-521e-9942-32fc6248adad)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/wpplugins/add-search-to-menu purl2cpe 2026-06-01 10:16:44.666109

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-6835 vulnerable 2026-06-08 06:58:20.568959 Ivory Search – WordPress Search Plugin <= 5.5.6 - Information Exposure via AJAX Search Form
MEDIUM (5.3)
The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 5.5.6 via the ajax_load_posts function. This makes it possible for unauthenticated attackers to extract text data from password-protected posts using the boolean-based attack on the AJAX search form
Published: 2024-09-05T06:41:38.540Z
Updated: 2026-04-08T16:32:27.010Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.