CVE-2024-6835: Ivorysearch Ivory Search

Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days.

The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 5.5.6 via the ajax_load_posts function. This makes it possible for unauthenticated attackers to extract text data from password-protected posts using the boolean-based attack on the AJAX search form

Affected products

• Ivorysearch Ivory Search: before 5.5.7 (fixed in 5.5.7)

Published 2024-09-05. Last modified 2026-06-17.