The Ivory Search plugin for WordPress has a security vulnerability that allows unauthorized individuals to access password-protected posts and extract text data. This is due to an issue with the ajax_load_posts function in all versions of the plugin up to 5.5.6.