Relevanssi – A Better Search (Pro)
Approved changes feed: RSS · Atom
cpe:2.3:a:relevanssi:relevanssi_–_a_better_search_(pro):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Relevanssi (476ee939-1f8c-510f-ae90-2f68792d3101) |
|---|---|
| Product | Relevanssi – A Better Search (Pro) (6cd57a20-30ac-522f-b7e2-36dff5026279) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-4396 |
vulnerable | 2026-06-08 07:29:16.205699 |
Relevanssi <= 4.24.4 (Free) and <= 2.27.5 (Premium) - Unauthenticated SQL Injection
HIGH (7.5)
The Relevanssi – A Better Search plugin for WordPress is vulnerable to time-based SQL Injection via the cats and tags query parameters in all versions up to, and including, 4.24.4 (Free) and <= 2.27.5 (Premium) due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries to already existing queries that can be used to extract sensitive information from the database.
Published: 2025-05-13T03:21:29.625Z
Updated: 2026-04-08T16:37:52.300Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3214 |
vulnerable | 2026-06-08 06:41:52.704349 |
Relevanssi – A Better Search <= 4.22.1 - Unauthenticated Second Order CSV Injection
MEDIUM (5.8)
The Relevanssi – A Better Search plugin for WordPress is vulnerable to CSV Injection in all versions up to, and including, 4.22.1. This makes it possible for unauthenticated attackers to embed untrusted input into exported CSV files, which can result in code execution when these files are downloaded and opened on a local system with a vulnerable configuration.
Published: 2024-04-09T18:59:07.972Z
Updated: 2026-04-08T17:10:51.294Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3213 |
vulnerable | 2026-06-08 06:41:52.703041 |
Relevanssi – A Better Search <= 4.22.1 - Missing Authorization to Unauthenticated Count Option Update
MEDIUM (5.3)
The Relevanssi – A Better Search plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the relevanssi_update_counts() function in all versions up to, and including, 4.22.1. This makes it possible for unauthenticated attackers to execute expensive queries on the application that could lead into DOS.
Published: 2024-04-09T18:59:30.531Z
Updated: 2026-04-08T17:30:07.100Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.