WP Clinic
Log in Sign up

CVE · Medium

CVE-2025-63069 — Ivory Search – WordPress Search Plugin [add-search-to-menu] < 5.5.13

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2025-63069 Ivory Search – WordPress Search Plugin [add-search-to-menu] < 5.5.13 Missing Authorization Medium 5.3 < 5.5.13 5.5.13 2025-09-28

CVE-2025-63069

The Ivory Search plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 5.5.12. This makes it possible for unauthenticated attackers to perform an unauthorized action.

Source: Wordfence

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.