Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-11-03
Better Search - Security Vulnerability (CVE-2026-119495)
Missing Authorization vulnerability in WebberZone Better Search better-search allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Better Search: from n/a through 4.5.2.
PLUGIN
Better Search
CVE-2026-119495
Risk Score
Threat Entry
Updated 2026-06-17
Better Search - Cross-Site Scripting (XSS) (CVE-2026-24938)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ajay Better Search better-search allows Stored XSS.This issue affects Better Search: from n/a through
PLUGIN
Better Search
CVE-2026-24938
Risk Score
Threat Entry
Updated 2026-06-17
Better Search - Cross-Site Scripting (XSS) (CVE-2025-47507)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ajay Better Search better-search allows DOM-Based XSS.This issue affects Better Search: from n/a through
PLUGIN
Better Search
CVE-2025-47507
Risk Score
Threat Entry
Updated 2026-06-17
Better Search - Cross-Site Scripting (XSS) (CVE-2024-29142)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebberZone Better Search – Relevant search results for WordPress allows Stored XSS.This issue affects Better Search – Relevant search results for WordPress: from n/a through 3.3.0.
PLUGIN
Better Search
CVE-2024-29142
Risk Score
Threat Entry
Updated 2026-06-17
Better Search - Cross-Site Request Forgery (CSRF) (CVE-2021-4400)
The Better Search plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.5.2. This is due to missing or incorrect nonce validation on the bsearch_process_settings_import() and bsearch_process_settings_export() functions. This makes it possible for unauthenticated attackers to import and export settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
PLUGIN
Better Search
CVE-2021-4400
Risk Score
Threat Entry
Updated 2026-06-17
Better Search - Cross-Site Request Forgery (CSRF) (CVE-2021-4373)
The Better Search plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.5.2. This makes it possible for unauthenticated attackers to import settings via forged request granted they can trick a site administrator into performing an action such as clicking on a link.
PLUGIN
Better Search
CVE-2021-4373
Risk Score