Relevanssi Live Ajax Search
Approved changes feed: RSS · Atom
cpe:2.3:a:relevanssi:relevanssi-live-ajax-search:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Relevanssi (476ee939-1f8c-510f-ae90-2f68792d3101) |
|---|---|
| Product | Relevanssi Live Ajax Search (f9d13ed9-3275-526b-a256-2309953cdebb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-7573 |
vulnerable | 2026-06-08 06:58:22.704351 |
Relevanssi Live Ajax Search <= 2.4 - Unauthenticated WP_Query Argument Injection
MEDIUM (5.3)
The Relevanssi Live Ajax Search plugin for WordPress is vulnerable to argument injection in all versions up to, and including, 2.4. This is due to insufficient validation of input supplied via POST data in the 'search' function. This makes it possible for unauthenticated attackers to inject arbitrary arguments into a WP_Query query and potentially expose sensitive information such as attachments or private posts.
Published: 2024-08-28T02:05:44.057Z
Updated: 2026-04-08T17:18:36.068Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.