CVE-2016-10917: Search Everything Project Search Everything

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

The search-everything plugin before 8.1.6 for WordPress has SQL injection related to empty search strings, a different vulnerability than CVE-2014-2316.

Affected products

• Search Everything Project Search Everything: before 8.1.6 (fixed in 8.1.6)

Published 2019-08-22. Last modified 2026-06-17.