Search Everything <= 8.1.0 is vulnerable to CSRF

Unauthenticated

Published
2014-05-21

Cross-site request forgery (CSRF) vulnerability in the Search Everything plugin before 8.1.1 for WordPress allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

CVE

https://www.cve.org/CVERecord?id=CVE-2014-3843

CVSS

Score:4.3

Severity:Medium

Version: 8.1.0

There is a patch available in v8.1.1 and we strongly recommend you update to this version as soon as possible.