WordPress Plugin Vulnerabilities
Relevanssi < 4.22.1 - Unauthenticated Query Log Export
Description
The plugin is vulnerable to unauthorized access of data due to a missing capability check on the relevanssi_export_log_check() function, allowing unauthenticated attackers to export the query log data. The vendor has indicated that they may look into adding a capability check for proper authorization control, however, this vulnerability is theoretically patched as is.
Affects Plugins
References
Classification
Type
NO AUTHORISATION
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
Krzysztof Zając
Verified
No
WPVDB ID
Timeline
Publicly Published
2024-02-22 (about 2 years ago)
Added
2024-02-26 (about 2 years ago)
Last Updated
2024-02-26 (about 2 years ago)