CVE-2010-4518: Cross-site scripting (XSS) vulnerability in wp-safe-search/wp-safe-search-jx.php in the Safe Search plugin...

Security readout for executives and security teams

This issue is a reflected cross-site scripting flaw in the Safe Search 0.7 WordPress plugin. A malicious link could cause script or HTML to run in a visitor's browser. Business risk depends on whether the obsolete plugin is still installed and reachable. Exposure is likely limited to WordPress sites that still run Safe Search plugin 0.7 or retain the vulnerable wp-safe-search/wp-safe-search-jx.php file. The provided CVE metadata does not identify other affected versions or products. Address during normal vulnerability remediation unless the plugin is internet-facing on important WordPress properties. Escalate if administrators use affected sites frequently, because XSS can support credential theft or session abuse when paired with social engineering. Mitigation focus: Inventory WordPress sites for the Safe Search plugin and version 0.7.; Remove or disable the plugin if it is unused or unsupported.; Check original vendor or WordPress plugin guidance for a fixed release..

Prepared

Jun 28, 2026, 01:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.