Plugin icon

Relevanssi – A Better Search

relevanssi

Vulnerabilities:

17

Last Updated:

March 16, 2026

Active Installs:

100000

Published
Title
Fixed in
CVSS
Published
2025-12-17
Title
Relevanssi (Free < 4.26.0, Premium < 2.29.0) - Contributor+ SQLi
Fixed in
Fixed in 4.26.0
CVSS
6.8 (medium)
Published
2025-05-30
Title
Relevanssi <= 4.24.5 (Free) and <= 2.27.6 (Premium) - Unauthenticated Stored Cross-Site Scripting via Excerpt Highlights
Fixed in
Fixed in 4.24.6
CVSS
4.7 (medium)
Published
2025-05-12
Title
Relevanssi < 4.24.5 (Free) and < 2.27.5 (Premium) - Unauthenticated SQL Injection
Fixed in
Fixed in 4.24.5
CVSS
7.5 (high)
Published
2025-05-06
Title
Relevanssi <= 4.24.3 (Free) and <= 2.27.4 (Premium) - Unauthenticated Stored Cross-Site Scripting via Search Highlights
Fixed in
Fixed in 4.24.4
CVSS
6.1 (medium)
Published
2024-09-17
Title
Relevanssi < 4.23.1 - Contributor+ Stored XSS
Fixed in
Fixed in 4.23.1
CVSS
6.8 (medium)
Published
2024-08-15
Title
Relevanssi < 4.23.0 - Unauthenticated Information Exposure
Fixed in
Fixed in 4.23.0
CVSS
5.3 (medium)
Published
2024-04-04
Title
Relevanssi – A Better Search < 4.22.2 - Missing Authorization to Unauthenticated Count Option Update
Fixed in
Fixed in 4.22.2
CVSS
5.3 (medium)
Published
2024-02-22
Title
Relevanssi < 4.22.1 - Unauthenticated Query Log Export
Fixed in
Fixed in 4.22.1
CVSS
5.3 (medium)
Published
2024-01-04
Title
Relevanssi (Free < 4.22.0, Premium < 2.25.0) - Unauthenticated Private/Draft Post Disclosure
Fixed in
Fixed in 4.22.0
CVSS
5.3 (medium)
Published
2022-02-15
Title
Relevanssi - Subscriber+ Unauthorised AJAX Calls
Fixed in
Fixed in 4.14.6
CVSS
5.4 (medium)
Published
2021-10-19
Title
Relevanssi - A Better Search < 4.14.3 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 4.14.3
CVSS
7.5 (high)
Published
2018-03-30
Title
Relevanssi <= 4.0.4 - Cross-Site Scripting (XSS)
Fixed in
Fixed in 4.0.5
CVSS
5.4 (medium)
Published
2017-10-03
Title
Relevanssi <= 3.6.0 - Authenticated Admin SQL Injection
Fixed in
Fixed in 3.6.1
CVSS
n/a
Published
2017-02-28
Title
Relevanssi <= 3.5.7 - Stored Cross-Site Scripting (XSS)
Fixed in
Fixed in 3.5.8
CVSS
6.1 (medium)
Published
2015-01-03
Title
Relevanssi < 3.3.8 - Cross-Site Scripting (XSS)
Fixed in
Fixed in 3.3.8
CVSS
n/a
Published
2014-08-01
Title
Relevanssi 2.7.2 - Stored XSS
Fixed in
Fixed in 2.7.3
CVSS
n/a
Published
2014-08-01
Title
Relevanssi 3.2 - Unspecified SQL Injection
Fixed in
Fixed in 3.3
CVSS
n/a