Vulnerabilities / Better Search / WPSEC-2026-1170
Better Search <= 4.5.1 - Unauthenticated Sensitive Information Exposure via Password-Protected Post Thumbnails
Low 3.7
CWE-200Fixed in 4.5.2
- ID
- WPSEC-2026-1170
- Plugin
- Better Search – Relevant search results for WordPress (better-search)
- Affected
- all versions before 4.5.2
- Remediation
- Update to 4.5.2 or later.
- CVSS 3.1
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
- Weakness
- CWE-200
- Usage
- Plugin Low · Affected versions Low among sites WPSec scans, 2026-10-17
- Attack surface
- Better Search on WPSec AttackSurface
- Fix released
- Published
Description
The Better Search plugin for WordPress is vulnerable to Sensitive Information Exposure via search result thumbnails in all versions up to, and including, 4.5.1, due to the thumbnail fallback logic (content image scan and first attached image) processing password-protected posts without checking whether the post password had been entered. This makes it possible for unauthenticated attackers to view images embedded in or attached to password-protected posts through the thumbnails shown in search results, on sites where the default 'Exclude password protected posts' setting has been disabled.
References
- https://wpsec.com/vuln/WPSEC-2026-1170/
- https://plugins.svn.wordpress.org/better-search/tags/4.5.2/
- https://wordpress.org/plugins/better-search/
Published by WPSec. Provided as is, without warranty. Corrections: contact us.
This advisory as JSON or Markdown · All advisories: JSON, RSS