WordPress security by component
Better Search Replace
Plugin description
Better Search Replace is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Feb 05, 2024; the highest CVE/CNA score is 8.8.
Plugin slug:
better-search-replaceLatest vulnerability
CVE-2023-6933: Better Search Replace: Code execution
Better Search Replace is affected by code execution. The vulnerable path is reachable without authentication. Successful exploitation can run attacker-controlled code in the WordPress hosting account.
| Safe version |
|
||
|---|---|---|---|
| Feb 05, 2024 |
CVE-2023-6933
Better Search Replace: Code execution
Better Search Replace is affected by code execution. The vulnerable path is reachable without authentication. Successful exploitation can run attacker-controlled code in the WordPress hosting account.
|
See mitigation notes |
CVE8.8
NVD9.8
|
| Aug 22, 2022 |
CVE-2022-2593
Better Search Replace: SQL injection
Better Search Replace is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
|
See mitigation notes |
CVE7.2
NVD7.2
|