Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Search & Replace 3.2.2

  • Severity: critical
  • Status: Fixed
  • Publication: July 11, 2024

The Search & Replace plugin for WordPress has a security issue where untrusted information can be used to inject a PHP Object. This can be exploited by attackers who do not have authorization to access the website. There is no existing protection against this vulnerability, but if there is another plugin or theme installed, it may allow the attacker to delete files, access private information, or run code.

Detected in:

Search & Replace fixed vulnerable versions: >= * <= 3.2.2

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.