Approved changes feed: RSS · Atom

cpe:2.3:a:wp-media:search_\&_replace:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorWp Media (5b661f9f-7720-55f4-94f4-67aaee50a4ad)
ProductSearch & Replace (29e0897a-8dbf-54f9-8209-348e38aba06c)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-4145 vulnerable 2026-06-08 06:50:17.108690 Search & Replace < 3.2.2 - Admin+ SQL injection
The Search & Replace WordPress plugin before 3.2.2 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks (such as within a multi-site network).
Published: 2024-06-13T06:00:02.892Z
Updated: 2024-08-01T20:33:52.569Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38759 vulnerable 2026-06-08 06:41:48.060636 WordPress Search & Replace plugin <= 3.2.2 - Deserialization of untrusted data vulnerability
MEDIUM (5.4)
Deserialization of Untrusted Data vulnerability in WP MEDIA SAS Search & Replace search-and-replace.This issue affects Search & Replace: from n/a through 3.2.2.
Published: 2024-07-22T10:30:18.249Z
Updated: 2026-04-28T16:10:06.224Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.