Vinod Dalvi Ivory Search – WordPress Search Plugin

• CVE-2026-92243 Medium 6.1 Ivory Search <= 5.5.18 - Reflected DOM-Based Cross-Site Scripting via 's' Parameter 0.2%
• CVE-2026-11356 Medium 4.4 Ivory Search <= 5.5.15 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'menu_title' and 'menu_magnifier_color' Settings 0.4%
• CVE-2026-1053 Medium 4.4 Ivory Search <= 5.5.13 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'menu_gcse' and 'nothing_found_text' Parameters 0.3%
• CVE-2024-6835 Medium 5.3 Ivory Search – WordPress Search Plugin <= 5.5.6 - Information Exposure via AJAX Search Form 0.5%
• CVE-2024-3233 Medium 4.3 Ivory Search – WordPress Search Plugin <= 5.5.5 - Missing Authorization to Authenticated (Subscriber+) Index Creation 0.4%