WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
relevanssi
Published
2021-10-19
Title
Relevanssi - A Better Search < 4.14.3 - Unauthenticated Stored Cross-Site Scripting
Slug
relevanssi
Published
2022-02-15
Title
Relevanssi - Subscriber+ Unauthorised AJAX Calls
Slug
relevanssi
Published
2024-01-04
Title
Relevanssi (Free < 4.22.0, Premium < 2.25.0) - Unauthenticated Private/Draft Post Disclosure
Slug
relevanssi
Published
2024-02-22
Title
Relevanssi < 4.22.1 - Unauthenticated Query Log Export
Slug
relevanssi
Published
2024-04-04
Title
Relevanssi – A Better Search < 4.22.2 - Missing Authorization to Unauthenticated Count Option Update
Slug
relevanssi
Published
2024-08-15
Title
Relevanssi < 4.23.0 - Unauthenticated Information Exposure
Slug
relevanssi
Published
2024-09-17
Title
Relevanssi < 4.23.1 - Contributor+ Stored XSS
Slug
relevanssi
Published
2025-05-06
Title
Relevanssi <= 4.24.3 (Free) and <= 2.27.4 (Premium) - Unauthenticated Stored Cross-Site Scripting via Search Highlights
Slug
relevanssi
Published
2025-05-12
Title
Relevanssi < 4.24.5 (Free) and < 2.27.5 (Premium) - Unauthenticated SQL Injection
Slug
relevanssi
Published
2025-05-30
Title
Relevanssi <= 4.24.5 (Free) and <= 2.27.6 (Premium) - Unauthenticated Stored Cross-Site Scripting via Excerpt Highlights
Slug
relevanssi
Published
2025-12-17
Title
Relevanssi (Free < 4.26.0, Premium < 2.29.0) - Contributor+ SQLi
Slug
relevanssi
Published
2026-08-04
Title
Relevanssi <= 4.27.1 and Relevanssi Premium <= 2.30.2 - Authenticated (Contributor+) SQL Injection
Slug
relevanssi
Published
2026-10-01
Title
Relevanssi < 4.28.4 - Unauthenticated Stored XSS via Comment Content
Slug
relevanssi
Published
2026-09-10
Title
Relevanssi < 4.28.2 - Reflected Cross-Site Scripting
Slug
relevanssi
Published
2026-10-22
Title
Relevanssi – A Better Search < 4.28.5 - Authenticated (Editor+) PHP Object Injection
Slug
relevanssi
Published
2026-10-30
Title
Relevanssi < 4.28.6 - Unauthenticated Stored XSS via Late Entity Decode of Comment Content
Slug
relevanssi-light
Published
2026-07-23
Title
Relevanssi Light < 1.2.3 - Unauthenticated SQL Injection
Slug
relevanssi-live-ajax-search
Published
2024-08-27
Title
Relevanssi Live Ajax Search < 2.5 - Unauthenticated WP_Query Argument Injection
Slug
relevanssi-premium
Published
2016-11-17
Title
Relevanssi Premium < 1.14.6.1 - SQL Injection & PHP Object Injection
Slug
relevanssi-premium
Published
2022-02-15
Title
Relevanssi - Subscriber+ Unauthorised AJAX Calls
Slug
relevanssi-premium
Published
2024-01-04
Title
Relevanssi (Free < 4.22.0, Premium < 2.25.0) - Unauthenticated Private/Draft Post Disclosure
Slug
relevanssi-premium
Published
2024-01-31
Title
Relevanssi Pro < 2.25 - Unauthenticated Sensitive Information Exposure
Slug
relevanssi-premium
Published
2024-04-04
Title
Relevanssi – A Better Search < 4.22.2 - Missing Authorization to Unauthenticated Count Option Update
Slug
relevanssi-premium
Published
2025-05-12
Title
Relevanssi < 4.24.5 (Free) and < 2.27.5 (Premium) - Unauthenticated SQL Injection
Slug
relevanssi-premium
Published
2025-05-30
Title
Relevanssi <= 4.24.5 (Free) and <= 2.27.6 (Premium) - Unauthenticated Stored Cross-Site Scripting via Excerpt Highlights