Search Everything
Search Everything has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2014 and 2017; all 4 are fixed as of September 2026. Their average CVSS score is 8.3, and the most serious one scores 9.8 out of 10. Severity breakdown: 3 critical and 0 high. 2014 was the busiest year with 2 disclosures.
The most common weakness is SQL Injection, behind 3 of the records (75%). Other recurring categories include Cross-Site Request Forgery (CSRF).
Every one of the 4 issues recorded for Search Everything has a vendor fix available, so running the current release closes all known holes.
Search Everything is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.7.35.
CVE-2017-18571Search Everything <= 8.1.6 - SQL Injection
Read the full analysisVulnerability Records

Search Everything
Author
Sovrn
Search Everything improves WordPress default search functionality without modifying any of the template pages. You can configure it to search pages, excerpts, attachments, drafts, comments, tags and custom fields (metadata) and you can specify your own search highlight style. It also offers the ability to exclude specific pages and posts. It does not search password-protected content. Simply install, configure… and search. Search Everything plugin now includes a writing helper called Research Everything that lets you search for your posts and link to them while writing. You can also enable Power Search to research posts from the wider web (for WP3.7 and above). Better WordPress search in three steps Activate Configure options Search! What it does Search Everything increases the ability of the default WordPress Search, options include: Search Highlighting Search Every Page Search Every Tag Search Custom Taxonomies ( new ) Search Every Category Search non-password protected pages only Search Every Comment Search only approved comments Search Every Draft Search Every Excerpt Search Every Attachment (post type, not the content itself – check FAQ) Search Every Custom Field (metadata) Exclude Posts from search Exclude Categories from search Update From Jan 24, 2014 Search Everything originaly developed by dancameron, sproutventure will be maintained and developed further by Zemanta. Terms of Service The plugin source code is released under GPLv2. Usage of our service is governed by Zemanta Terms of Service and Zemanta Privacy Policy.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C