Bible SuperSearch

Bible SuperSearch has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Bible SuperSearch has a vendor fix available, so running the current release closes it.

All of these findings were reported by Peter Thaleikis. Bible SuperSearch is installed on roughly 300 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Bible SuperSearch vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2025-8064

Bible SuperSearch <= 6.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via selector_height Parameter

Read the full analysis

Vulnerability Records

1 records
Bible SuperSearch banner
Latestv6.2.2

Bible SuperSearch

aicwebtech

Author

aicwebtech

5.0(3)
100/100
Last Updated
2026-02-21 (7mo ago)
Active Installs
300+
Downloads
27,428
Requires WP
5.0+
Requires PHP
7.3+
Tested up to
WP 6.9.7
Created
2018-02-03 (9y ago)

Add the Bible to your website with a Bible search engine and a Bible download page. Our Bible search engine includes multiple selectable interfaces, allowing you to make it appear as simple or as complex as desired. The Bible downloads is included in the main application, but is also available as a separate shortcode for a separate page. Keep your users on your website! Unlike similar plugins, Bible SuperSearch displays the Bible text directly on your website; your web users will not be redirected to a 3rd party website to view the text. This is the official Bible SuperSearch plugin. It allows for seamless use of the Bible SuperSearch client and API on any WordPress site. This plugin pulls data from our API transparently. You also have the option to install our API on your server for complete autonomy. Core Features Bible search engine Many Bible translations (enable only the ones you want) Look up multiple passages Random Chapter and Verse Limit search to specific sections or passages Search for all words, any word or whole phrase Search for words in nearby verses and not just all in the same verse Search by boolean expressions and regular expressions Verse proximity search: Find keywords in nearby verses Strong’s number searches and Strong’s definition hover dialogs (on Strong’s enabled Bibles) Increase or decrease text size Changable text style Ability to copy, print and share Bible text Switch between verse mode and paragraph mode Advanced search Bible help and getting started dialogs Bible downloads dialog and shortcode allows downloading Bible text in various formats. The shortcode allows having downloads separate from the main Bible app. Selectable skins (interfaces) allow the Bible search to appear as simple or as complex as desired Audio Bible playback option (requires self-hosted BibleSuperSearch API). Widget providing a small Bible search form. Bible downloads – ability to download public domain or non-commercial use only Bibles in several formats This plugin communicates with the Bible SuperSearch API to retrieve data it needs to function. Please see the Technical Details below for more information. By installing and using this plugin, you agree to the API Terms of Service. Also see the API Privacy Policy and API full documentation However, you have the option to install our API on your server, and run Bible SuperSearch entirely from your website. https://www.biblesupersearch.com/downloads/ Technical Details API This plugin communicates with the Bible SuperSearch API to retrieve data it needs to function. This data includes: * Results for all Bible search queries * List of available Bible translations * List of available search types * List of available shortcuts * List of Bible books * API Version By installing and using this plugin, you agree to the API Terms of Service. Also see the API Privacy Policy and API full documentation Client This plugin is a wrapper around the official Bible SuperSearch client. This client is written in the Javascript framework Enyo, and the code is minified. However, the source code can be seen in this GIT repository: https://sourceforge.net/p/biblesuper/ui-d/ci/master/tree/ Directories wp – code specific to this WordPress plugin com_test – Bible SuperSearch client (minified)

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C