← All advisories

Medium severity4.8NVD Advisory· Published Oct 21, 2021· Updated Jun 17, 2026

CVE-2021-36869

CVE-2021-36869

Description

Reflected Cross-Site Scripting (XSS) vulnerability in WordPress Ivory Search plugin (versions <= 4.6.6). Vulnerable parameter: &post.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Ivorysearch/Ivory Search
cpe:2.3:a:ivorysearch:ivory_search:*:*:*:*:*:wordpress:*:*
Range: <=4.6.6
WordPress/Ivory Searchllm-fuzzy
Range: <=4.6.6
Ivory Search/Ivory Search – WordPress Search Plugincpe-rescue
Range: <= 4.6.6

Patches

Vulnerability mechanics

References

2

patchstack.com/database/vulnerability/add-search-to-menu/wordpress-ivory-search-plugin-4-6-6-reflected-cross-site-scripting-xss-vulnerabilitynvdThird Party Advisory
wordpress.org/plugins/add-search-to-menu/nvdProductThird Party Advisory

News mentions

0

No linked articles in our index yet.