damian-gora FiboSearch – Ajax Search for WooCommerce

• CVE-2026-100106 Medium 6.4 FiboSearch <= 1.34.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'purchased_plan' Parameter 0.2%
• CVE-2025-14298 Medium 5.4 FiboSearch – Ajax Search for WooCommerce <= 1.32.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via thegem_te_search Shortcode 0.3%
• CVE-2022-4974 Medium 6.3 Freemius SDK <= 2.4.2 - Missing Authorization Checks 0.4%
• CVE-2023-2450 Medium 4.4 The FiboSearch - AJAX Search for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 1.23.0 due to insufficient input sa 0.6%