Better Search Replace vulnerabilities

1 known vulnerability in Better Search Replace from Wpengine. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Better Search Replace: Deserialization of Untrusted Data

  CVE-2023-6933Feb 5, 2024WpengineEPSS 68%

  The Better Search Replace plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.4 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject a PHP Object. No POP chain i