Better Search Webberzone Better Search

Do you want an email whenever new security vulnerabilities are reported in Webberzone Better Search?

By the Year

In 2024 there have been 0 vulnerabilities in Webberzone Better Search . Last year Better Search had 3 security vulnerabilities published. Right now, Better Search is on track to have less security vulnerabilities in 2024 than it did last year.

Year Vulnerabilities Average Score
2024 0 0.00
2023 3 4.30
2022 0 0.00
2021 0 0.00
2020 0 0.00
2019 0 0.00
2018 0 0.00

It may take a day or so for new Better Search vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Webberzone Better Search Security Vulnerabilities

The Better Search plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.5.2

CVE-2021-4400 4.3 - Medium - July 01, 2023

The Better Search plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.5.2. This is due to missing or incorrect nonce validation on the bsearch_process_settings_import() and bsearch_process_settings_export() functions. This makes it possible for unauthenticated attackers to import and export settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

Session Riding

The Better Search plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.5.2

CVE-2021-4373 4.3 - Medium - June 07, 2023

The Better Search plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.5.2. This makes it possible for unauthenticated attackers to import settings via forged request granted they can trick a site administrator into performing an action such as clicking on a link.

Session Riding

** REJECT ** CVE split into individual CVE IDs for each software record.

CVE-2021-4342 - June 07, 2023

** REJECT ** CVE split into individual CVE IDs for each software record.

Stay on top of Security Vulnerabilities

Want an email whenever new vulnerabilities are published for Rucyproject Rucy or by Webberzone? Click the Watch button to subscribe.

Webberzone
Vendor

subscribe