Vulnerabilities and security researches forbetter-search better-search

Jun 07, 2024

CVE, Research URL: 009030d9af32db344e40c636c53a3bfd75ffada5
Home page URL: Security reports for Better Search – Relevant search results for WordPress
Application: Better Search – Relevant search results for WordPress
Date: Feb 17, 2021
Research Description: Better Search – Relevant search results for WordPress [better-search] < 3.2.0 WordPress Better Search plugin <= 2.5.2 - Cross-Site Request Forgery (CSRF) vulnerability Cross-Site Request Forgery (CSRF) vulnerability found in WordPress Better Search plugin (versions <= 2.5.2).
Affected versions: Min -, max -.
Status: vulnerable

CVE, Research URL: CVE-2021-4400
Home page URL: Security reports for Better Search – Relevant search results for WordPress
Application: Better Search – Relevant search results for WordPress
Date: Jul 01, 2023
Research Description: The Better Search plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.5.2. This is due to missing or incorrect nonce validation on the bsearch_process_settings_import() and bsearch_process_settings_export() functions. This makes it possible for unauthenticated attackers to import and export settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Affected versions: Min -, max -.
Status: vulnerable

CVE, Research URL: CVE-2024-29142
Home page URL: Security reports for Better Search – Relevant search results for WordPress
Application: Better Search – Relevant search results for WordPress
Date: Mar 19, 2024
Research Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebberZone Better Search – Relevant search results for WordPress allows Stored XSS.This issue affects Better Search – Relevant search results for WordPress: from n/a through 3.3.0.
Affected versions: Min -, max -.
Status: vulnerable

CVE, Research URL: CVE-2021-4373
Home page URL: Security reports for Better Search – Relevant search results for WordPress
Application: Better Search – Relevant search results for WordPress
Date: Jun 07, 2023
Research Description: The Better Search plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.5.2. This makes it possible for unauthenticated attackers to import settings via forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Affected versions: Min -, max -.
Status: vulnerable

CVE, Research URL: -
Home page URL: Security reports for Better Search – Relevant search results for WordPress
Application: Better Search – Relevant search results for WordPress
Date: Jun 07, 2023
Research Description: Rejected reason: CVE split into individual CVE IDs for each software record.
Affected versions: Min -, max -.
Status: vulnerable

May 09, 2025

CVE, Research URL: CVE-2025-47507
Home page URL: Security reports for Better Search – Relevant search results for WordPress
Application: Better Search – Relevant search results for WordPress
Date: May 07, 2025
Research Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ajay Better Search allows DOM-Based XSS. This issue affects Better Search: from n/a through 4.1.0.
Affected versions: Min -, max -.
Status: vulnerable