Sploitus

3 exploited vulnerabilities in Ivory Search

Vulnerabilities with publicly known exploits

Vendors
WordPress
With known exploits
3
Affected Ivorysearch Ivory Search versions
< 4.6.1, 5.5.10, 5.4.1

Vulnerabilities with exploits

Highest CVSS first — 2 of these already have exploit code on Sploitus

CVE-2021-24234 1 exploit
CVSS 6.1 MEDIUM 2021-04-22FIX AVAILABLE
Ivory Search < 4.6.1 - Reflected Cross Site Scripting (XSS)
CVE-2025-5209
CVSS 4.8 MEDIUM 2025-06-17FIX AVAILABLE
CVE-2021-25105 1 exploit
CVSS 4.8 MEDIUM 2022-02-07FIX AVAILABLE
Ivory Search < 5.4.1 - Multiple Admin+ Stored Cross-Site Scripting