CVE-2017-18571: Search Everything Project Search Everything

Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days.

The search-everything plugin before 8.1.7 for WordPress has SQL injection related to WordPress 4.7.x, a different vulnerability than CVE-2014-2316.

Affected products

• Search Everything Project Search Everything: before 8.1.7 (fixed in 8.1.7)

Published 2019-08-22. Last modified 2026-06-17.