CVE-2019-15895: Search Exclude Project Search Exclude

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

search-exclude.php in the "Search Exclude" plugin before 1.2.4 for WordPress allows unauthenticated options changes.

Affected products

• Search Exclude Project Search Exclude: before 1.2.4 (fixed in 1.2.4)

Published 2019-09-09. Last modified 2026-06-17.