Search Cloud One
Search Cloud One has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 4.4, and the most serious one scores 4.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Search Cloud One has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Vinit Lakra. The current release is tested up to WordPress 5.1.24.
CVE-2025-58883Search Cloud One <= 2.2.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records
Search Cloud One
Author
Thomas Harris
Search Cloud One eliminates the expense of purchasing, deploying and maintaining traditional hardware and software. Allow members of your organization, guests or subscribers to search documents, which are stored securely using AES-256 Encryption on Amazon S3. Search on your WordPress Sites: Embed Search Pages into your sites using our WordPress Plugin. Search with our API: Take advantage of our API to add Search to your Websites and Applications. Log in to Search Cloud One: To search directly. Requirements This plugin depends on Search Cloud One Search as a Service, you will need an account with Search Cloud One. Quick Start Set up your first search page quickly and easily by following the quick start guide included in the plugin after installation. Speed Powered by the dtSearch Engine, Search Cloud One provides instant searching of terabytes of text. Hits highlighted Navigate through document hits quickly using our hit highlighter Advanced functionality Find more documents with Stemming and Synonym Searching Divide and conquer with Category Search functionality Narrow down results with date range and text field filters
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C