VVinod Dalvi

Products

Exploited and recent CVEs

• CVE-2026-92243 Medium 6.1 Ivory Search <= 5.5.18 - Reflected DOM-Based Cross-Site Scripting via 's' Parameter 0.2%
• CVE-2026-11356 Medium 4.4 Ivory Search <= 5.5.15 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'menu_title' and 'menu_magnifier_color' Settings 0.4%
• CVE-2026-1053 Medium 4.4 Ivory Search <= 5.5.13 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'menu_gcse' and 'nothing_found_text' Parameters 0.3%
• CVE-2025-63069 Medium 5.3 WordPress Ivory Search plugin <= 5.5.12 - Broken Access Control vulnerability 0.3%
• CVE-2024-6835 Medium 5.3 Ivory Search – WordPress Search Plugin <= 5.5.6 - Information Exposure via AJAX Search Form 0.5%
• CVE-2024-3726 Medium 6.4 Login Logout Register Menu <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'llrmloginlogout' Shortcode 0.3%
• CVE-2024-33932 Medium 6.5 WordPress Login Logout Register Menu plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2024-3233 Medium 4.3 Ivory Search – WordPress Search Plugin <= 5.5.5 - Missing Authorization to Authenticated (Subscriber+) Index Creation 0.4%