Search with Typesense

Search with Typesense has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; all 2 are fixed as of September 2026. Their average CVSS score is 4.6, and the most serious one scores 6.4 out of 10. 2025 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 1 of the records (50%). Other recurring categories include Path Traversal.

Every one of the 2 issues recorded for Search with Typesense has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Search with Typesense is installed on roughly 700 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.0.

Strategic Overview

Avg CVSSMedium

4.6/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Search with Typesense vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2025-49304

Search with Typesense <= 2.0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records


2025-06-05 00:00	Search with Typesense <= 2.0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting Search with Typesense <= 2.0.10	`CVE-2025-49304`	6.4 Medium	Muhammad Yudha - DJ	Yes
2025-02-22 00:00	Search with Typesense <= 2.0.8 - Authenticated (Admin+) Path Traversal Search with Typesense <= 2.0.8	`CVE-2025-26876`	2.7 Low	astra.r3verii	Yes

Showing 1–2 of 2 reports

Latestv2.1.3

Search with Typesense

Author

CodeManas

5.0(11)

100/100

Last Updated

2026-05-27 (4mo ago)

Active Installs

700+

Downloads

27,907

Requires WP

6.8+

Requires PHP

7.4+

Tested up to

WP 7.0.0

Created

2022-01-04 (5y ago)

Turbocharge your sites search functionality with Typesense. Create a fast search experience for your site. Give your users a search listing page or autocomplete search. Typesense is a modern, privacy-friendly, open source search engine built from the ground up using cutting-edge search algorithms, that take advantage of the latest advances in hardware capabilities. FEATURES Lightning-fast search results in milliseconds Allow overriding native WordPress default search for whole site. Shortcodes for adding search in only specific locations. Hooks and filters for customizations Template Override for design customizations. Developer friendly Elementor widgets: Instant Search and Autocomplete This plugin requires API keys from Typesense. Getting Started with Typesense LINKS Documentation Typesense Typesense WordPress Site Typesense Search for WooCommerce Typesense Comparison with other platforms DEMO LINKS Frontend Demo Autocomplete Instant Search PRO ADDONS Addon: WooCommerce Addon

View on WordPress.org