RP
Product
Relevanssi Premium
8
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 1High 4Medium 3Low 0
Watch
Add Relevanssi Premium to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-3214 | 9.8 | Apr 9 | Relevanssi – A Better Search <= 4.22.1 - Unauthenticated Second Order CSV Injection Affected: through 2.25.1 |
| CVE-2024-3213 | 8.2 | Apr 9 | Relevanssi – A Better Search <= 4.22.1 - Missing Authorization to Unauthenticated Count Option Update Affected: through 2.25.1 |
| CVE-2025-4396 | 7.5 | May 13 | Relevanssi <= 4.24.4 (Free) and <= 2.27.5 (Premium) - Unauthenticated SQL Injection Affected: through 2.27.5 |
| CVE-2024-7630 | 7.5 | Aug 16 | Relevanssi <= 4.22.2 (Free) and <= 2.25.1 (Premium) - Unauthenticated Information Exposure Affected: through 2.25.1 |
| CVE-2026-103426 | 7.2 | Oct 2 | Relevanssi Premium <= 2.31.4 - Unauthenticated Stored Cross-Site Scripting via '_rt' Parameter Affected: through 2.31.4 |
| CVE-2025-4054 | 6.1 | May 7 | Relevanssi <= 4.24.3 (Free) and <= 2.27.4 (Premium) - Unauthenticated Stored Cross-Site Scripting via Search Highlights Affected: through 2.27.4 |
| CVE-2024-1380 | 5.3 | Mar 13 | Relevanssi – A Better Search <= 4.22.0 (Free) and <= 2.25.0 (Premium) - Missing Authorization to Unauthenticated Query Log Export Affected: through 2.25.0 |
| CVE-2025-5016 | 4.7 | May 31 | Relevanssi <= 4.24.5 (Free) and <= 2.27.6 (Premium) - Unauthenticated Stored Cross-Site Scripting via Excerpt Highlights Affected: through 2.27.6 |
Showing 8
