Skip to content
PluginCanary

Ivory Search

Ivory Search - WordPress Search Plugin
by Vinod Dalvi · 90,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 21 Oct 2026, 13 releases in 24 months, no unpatched vulnerabilities.

86/ 100 Canary Score
Sub-scores for Ivory Search
Ownership100
Maintenance100
Security70
Support70
Reputation85

How the score works

Quick answers

Is Ivory Search still maintained?
Yes. Last release 21 Oct 2026, 13 releases in the last 24 months. 21 Oct 2026 · wordpress.org
Who owns Ivory Search, and has it changed hands?
No change recorded. Main committer vinod dalvi since Apr 2017. 4 Nov 2026 · SVN log
Was Ivory Search removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is Ivory Search safe?
16 known vulnerabilities, all fixed (latest in 5.5.19). Not on the exploited list. 2 Oct 2026 · Wordfence Intelligence
Is the latest Ivory Search update safe to install?
No ownership change before 5.5.20. No one-star spike after it. 21 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
vinod dalvi7 Apr 2017 to 21 Oct 2026, 149 commits

1 committer recorded. No ownership change since 2017.

Maintenance

Last release
14 days ago
Releases, 24 months
13
Tested up to
7.1 current
Requires PHP
5.2.4 supported 8.2+
Releases per quarter
Releases per quarter for Ivory Search
Q1 20241
Q2 20241
Q3 20241
Q4 20241
Q1 20251
Q2 20252
Q3 20250
Q4 20252
Q1 20261
Q2 20262
Q3 20262
Q4 20262

Last release 21 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 4.8 (5 reviews). Lifetime: 4.9.

Average rating per quarter for Ivory Search
Q1 20264.7
Q2 20264.3
Q3 20265.0
Q4 20264.0

Average rating fell from 4.7 to 4.0 between Q1 2026 and Q4 2026.

Rating distribution
5 star1481
4 star48
3 star8
2 star5
1 star20
Latest low reviews

Security record

6 vulnerabilities in 24 months (16 on record), all patched (latest fixed in 5.5.19).

Show 16 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
2 Oct 2026Ivory Search <= 5.5.18 - Reflected DOM-Based Cross-Site Scripting via 's' Parameter6.1<= 5.5.185.5.19Patched before disclosure
26 Jun 2026Ivory Search <= 5.5.15 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'menu_title' and 'menu_magnifier_color' Settings4.4<= 5.5.155.5.16Patched before disclosure
30 Apr 2026Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter6.1<= 5.5.85.5.9Patched before disclosure
27 Jan 2026Ivory Search <= 5.5.13 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'menu_gcse' and 'nothing_found_text' Parameters4.4<= 5.5.135.5.14Patched before disclosure
28 Sep 2025Ivory Search <= 5.5.12 - Missing Authorization5.3<= 5.5.125.5.1374
27 May 2025Ivory Search – WordPress Search Plugin <= 5.5.9 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 5.5.95.5.10Patched before disclosure
4 Sep 2024Ivory Search – WordPress Search Plugin <= 5.5.6 - Information Exposure via AJAX Search Form5.3<= 5.5.65.5.7Patched before disclosure
12 Apr 2024Ivory Search – WordPress Search Plugin <= 5.5.5 - Missing Authorization to Authenticated (Subscriber+) Index Creation4.3<= 5.5.55.5.6Patched before disclosure
18 Jul 2023Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get6.14.0 to 5.5.15.5.2Patched before disclosure
4 Jul 2022Ivory Search <= 5.4.6 - Reflected Cross-Site Scripting6.1<= 5.4.65.4.7Patched before disclosure
4 Mar 2022Freemius SDK <= 2.4.2 - Missing Authorization Checks6.3< 5.4.45.4.4Patched before disclosure
10 Jan 2022Ivory Search <= 5.4 - Multiple Admin+ Stored Cross-Site Scripting4.8<= 5.45.4.1Patched before disclosure
2 Nov 2021Ivory Search <= 4.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 4.7.14.83
1 Oct 2021Ivory Search <= 4.6.6 - Reflected Cross-Site Scripting6.1<= 4.6.64.71
30 Mar 2021Ivory Search <= 4.6 - Reflected Cross Site Scripting6.1<= 4.64.6.1Patched before disclosure
1 Feb 2021Ivory Search – WordPress Search Plugin <= 4.5.10 - Reflected Cross-Site Scripting6.1<= 4.5.104.5.11Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

0% of 1 support threads resolved in the last 2 months.

Momentum

90,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Ivory Search
4 May 20261,148
11 May 20262,321
18 May 20262,176
25 May 202631,329
1 Jun 202611,662
8 Jun 20266,144
15 Jun 20264,723
22 Jun 202636,458
29 Jun 202610,703
6 Jul 20269,128
13 Jul 20264,467
20 Jul 20264,575
27 Jul 20263,627
3 Aug 20263,523
10 Aug 20263,289
17 Aug 202623,497
24 Aug 202645,771
31 Aug 20267,683
7 Sep 20264,745
14 Sep 20266,344
21 Sep 20264,847
28 Sep 202632,488
5 Oct 202616,068
12 Oct 20265,901
19 Oct 202638,155
26 Oct 202612,740
2 Nov 20261,158

Weekly downloads over the last 4 weeks are 17% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

SearchWP Live Ajax SearchScore 91 · 40,000+ACFScore 91 · 40,000+Search & FilterScore 90 · 40,000+Search ExcludeScore 89 · 50,000+

Facts

Version5.5.20
AuthorVinod Dalvi
Added6 Apr 2017
Last updated21 Oct 2026
Active installs90,000+
Requires WordPress3.9
Tested up to7.1.4
Requires PHP5.2.4
CategoryE-commerce & Shopping
Tagssearch, ajax search, file search, image search, woocommerce search

Other plugins by this author: Exclude Pages From Menu, Publish Date DatePicker, Search Admin Menus

Questions

Is Ivory Search still maintained?

Yes. Last release 21 Oct 2026, 13 releases in the last 24 months.

Who owns Ivory Search, and has it changed hands?

No change recorded. Main committer vinod dalvi since Apr 2017.

Was Ivory Search removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is Ivory Search safe?

16 known vulnerabilities, all fixed (latest in 5.5.19). Not on the exploited list.

Is the latest Ivory Search update safe to install?

No ownership change before 5.5.20. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue