Relevanssi
Approved changes feed: RSS · Atom
cpe:2.3:a:relevanssi:relevanssi:*:*:*:*:premium:wordpress:*:*
part: a version: * update: *
| Vendor | Relevanssi (476ee939-1f8c-510f-ae90-2f68792d3101) |
|---|---|
| Product | Relevanssi (a9dd1708-8996-5f6a-97bb-35b098e2c466) |
| Edition | * |
| Language | * |
| Software edition | premium |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/msaari/relevanssi |
purl2cpe | 2026-06-01 10:16:14.255637 |
pkg:github/wp-plugins/relevanssi |
purl2cpe | 2026-06-01 10:16:14.255638 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-3213 |
vulnerable | 2026-06-08 06:41:52.701103 |
Relevanssi – A Better Search <= 4.22.1 - Missing Authorization to Unauthenticated Count Option Update
MEDIUM (5.3)
The Relevanssi – A Better Search plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the relevanssi_update_counts() function in all versions up to, and including, 4.22.1. This makes it possible for unauthenticated attackers to execute expensive queries on the application that could lead into DOS.
Published: 2024-04-09T18:59:30.531Z
Updated: 2026-04-08T17:30:07.100Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-10949 |
vulnerable | 2026-06-08 05:07:25.886178 |
Details available
The Relevanssi Premium plugin before 1.14.6.1 for WordPress has SQL injection with resultant unsafe unserialization.
Published: 2019-09-13T12:06:12.000Z
Updated: 2024-08-06T03:38:56.685Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.