CVE-2021-36869: Ivorysearch Ivory Search

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

Reflected Cross-Site Scripting (XSS) vulnerability in WordPress Ivory Search plugin (versions <= 4.6.6). Vulnerable parameter: &post.

Affected products

• Ivorysearch Ivory Search: up to and including 4.6.6

Published 2021-10-21. Last modified 2026-06-17.