Search & Filter
Search & Filter has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2025; all 2 are fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Cross-Site Scripting.
Every one of the 2 issues recorded for Search & Filter has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. Search & Filter is installed on roughly 50,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2022-4467Search & Filter <= 1.2.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Read the full analysisVulnerability Records

Search & Filter
Author
Code Amp
Search & Filter is a simple search and filtering plugin for WordPress – it is an advancement of the WordPress search box. You can search by Category, Tag, Custom Taxonomy, Post Type, Post Date or any combination of these easily to really refine your searches – remove the search box and use it as a filtering system for your posts and pages. Fields can be displayed as dropdowns, checkboxes, radio buttons or multi selects. Links: Search & Filter Documentation | Follow us on Twitter Get more features with Search & Filter Pro View live demo >> Search Custom Fields, Post Meta, Authors, Post Types, Post Dates, Taxonomies, Tags, Categories Use AJAX to display results – no more page reloading! Search Post Meta/Custom Fields with checkboxes, radio buttons, dropdowns, multiselects or comboboxes jQuery range slider, date pickers and auto-complete comboboxes for selects and multiselects Order Results Field – users can order results by meta value, Post ID, author, title, name, date, date modified, parent ID, random, comment count and menu order Drag & Drop editor Use custom templates Create as many fields and different search forms as you like Use for blogs, reviews sites, news sites, property sites and more. Use for your online shop – tested and compatible with WooCommerce, WP eCommerce, Easy Digital Downloads Place anywhere in your themes and posts using shortcodes and widgets Works with WPML Works with Advanced Custom Fields Extremely easy to use admin UI, fully integrated with WP 3.8+ Dedicated Support More info >>
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C