WordPress Plugin Vulnerabilities

Relevanssi < 4.22.1 - Unauthenticated Query Log Export

Description

The plugin is vulnerable to unauthorized access of data due to a missing capability check on the relevanssi_export_log_check() function, allowing unauthenticated attackers to export the query log data. The vendor has indicated that they may look into adding a capability check for proper authorization control, however, this vulnerability is theoretically patched as is.

Affects Plugins

Fixed in 4.22.1

References

Classification

Type
NO AUTHORISATION
CWE

Miscellaneous

Original Researcher
Krzysztof Zając
Verified
No

Timeline

Publicly Published
2024-02-22 (about 2 years ago)
Added
2024-02-26 (about 2 years ago)
Last Updated
2024-02-26 (about 2 years ago)

Other