PatchTheCVEsearch everything vulnerabilities and fixes
Recent CVEs affecting search everything, with upgrade or downgrade steps. 2 tracked.
Also searched as: searcheverything.
search everything has 2 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 2. Most recent: 2019-08-22. Highest priority: CVE-2017-18571 (score 59/100).
- CVE-2017-18571 CRITICAL 9.8 UPGRADE The search-everything plugin before 8.1.7 for WordPress has SQL injection related to WordPress 4.7.x, a differ
- CVE-2016-10917 CRITICAL 9.8 UPGRADE The search-everything plugin before 8.1.6 for WordPress has SQL injection related to empty search strings, a d
FAQ
How do I fix search everything vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is search everything being exploited right now?
None of the tracked search everything CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which search everything CVE should I patch first?
CVE-2017-18571 currently ranks highest (59/100): The search-everything plugin before 8.1.7 for WordPress has SQL injection related to WordPress 4.7.x, a differ.