← All advisories

Medium severity5.4NVD Advisory· Published Nov 8, 2022· Updated Jun 17, 2026

CVE-2022-40223

CVE-2022-40223

Description

Nonce token leakage and missing authorization in SearchWP premium plugin <= 4.2.5 on WordPress leading to plugin settings change.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Searchwp/Searchwp
cpe:2.3:a:searchwp:searchwp:*:*:*:*:*:wordpress:*:*
Range: <=4.2.5
WordPress/SearchWPllm-fuzzy
Range: <=4.2.5
SearchWP, LLC/SearchWPv5
Range: <= 4.2.5

Patches

Vulnerability mechanics

References

2

patchstack.com/database/vulnerability/searchwp/wordpress-searchwp-premium-plugin-4-2-5-broken-authentication-vulnerabilitynvdThird Party Advisory
searchwp.com/documentation/changelog/nvdRelease NotesVendor Advisory

News mentions

0

No linked articles in our index yet.