CVE-2022-40223: Searchwp

Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days.

Nonce token leakage and missing authorization in SearchWP premium plugin <= 4.2.5 on WordPress leading to plugin settings change.

Affected products

• Searchwp Searchwp: up to and including 4.2.5

Published 2022-11-08. Last modified 2026-06-17.