PLUGIN SECURITY

Is Search Regex safe?

Search Regex adds a powerful set of search and replace functions to WordPress posts, pages, custom post types, and other data.

What this plugin does

  • Slug: search-regex
  • Author: John Godley
  • 100000+ active installs
  • 94/100 rating (101 reviews on wordpress.org)
  • 2809778 all-time downloads
  • On WordPress.org since 2007-09-17

databaseregexregular expressionreplacesearch

Maintenance status

  • Latest known version: 3.4.3
  • Last updated: 2026-10-06 1:37pm GMT
  • Tested up to WordPress: 7.1.3
  • Requires PHP: 7.4+
  • Max supported PHP (analyzed): 8.4

Known vulnerabilities

1 known CVE on file for Search Regex. Reported between 2026 and 2026.

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-104932 Search Regex [search-regex] < 3.5.1 Deserialization of Untrusted Data High 8.0 < 3.5.1 3.5.1 2026-10-15 ⚠ update needed

How to fix it

Keep Search Regex updated — 3.4.3 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").

This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.

Safer / more established alternatives

Check your own WordPress site

Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.