RE
Vendor
Relevanssi
21
CVEs
0
On KEV
1
New 30D
Products
RP9.8
Relevanssi Premium
Relevanssi
8 CVEs0 on KEV1 new
RE9.8
Relevanssi
Relevanssi
11 CVEs0 on KEV0 new
RE5.3
Relevanssi-live-ajax-search
Relevanssi
1 CVEs0 on KEV0 new
RP6.5
Relevanssi Premium – A Better Search
Relevanssi
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-103426 | RP Relevanssi Premium Relevanssi | 7.2 | Oct 2 | Relevanssi Premium <= 2.31.4 - Unauthenticated Stored Cross-Site Scripting via '_rt' Parameter |
| CVE-2026-15941 | RP Relevanssi Premium – A Better Search Relevanssi | 6.5 | Aug 5 | Relevanssi <= 4.27.1 and Relevanssi Premium <= 2.30.2 - Authenticated (Contributor+) SQL Injection |
| CVE-2025-5016 | RP Relevanssi Premium Relevanssi | 4.7 | May 31 | Relevanssi <= 4.24.5 (Free) and <= 2.27.6 (Premium) - Unauthenticated Stored Cross-Site Scripting via Excerpt Highlights |
| CVE-2025-4396 | RP Relevanssi Premium Relevanssi | 7.5 | May 13 | Relevanssi <= 4.24.4 (Free) and <= 2.27.5 (Premium) - Unauthenticated SQL Injection |
| CVE-2025-4054 | RP Relevanssi Premium Relevanssi | 6.1 | May 7 | Relevanssi <= 4.24.3 (Free) and <= 2.27.4 (Premium) - Unauthenticated Stored Cross-Site Scripting via Search Highlights |
| CVE-2024-9021 | RE Relevanssi Relevanssi | 5.4 | Oct 8 | Relevanssi < 4.23.1 - Contributor+ Stored XSS |
| CVE-2024-7573 | RE Relevanssi-live-ajax-search Relevanssi | 5.3 | Aug 28 | Relevanssi Live Ajax Search <= 2.4 - Unauthenticated WP_Query Argument Injection |
| CVE-2024-7630 | RP Relevanssi Premium Relevanssi | 7.5 | Aug 16 | Relevanssi <= 4.22.2 (Free) and <= 2.25.1 (Premium) - Unauthenticated Information Exposure |
| CVE-2024-3213 | RP Relevanssi Premium Relevanssi | 8.2 | Apr 9 | Relevanssi – A Better Search <= 4.22.1 - Missing Authorization to Unauthenticated Count Option Update |
| CVE-2024-3214 | RP Relevanssi Premium Relevanssi | 9.8 | Apr 9 | Relevanssi – A Better Search <= 4.22.1 - Unauthenticated Second Order CSV Injection |
| CVE-2024-1380 | RP Relevanssi Premium Relevanssi | 5.3 | Mar 13 | Relevanssi – A Better Search <= 4.22.0 (Free) and <= 2.25.0 (Premium) - Missing Authorization to Unauthenticated Query Log Export |
| CVE-2023-7199 | RE Relevanssi Relevanssi | 5.3 | Jan 29 | Relevanssi (Free < 4.22.0, Premium < 2.25.0) - Unauthenticated Private/Draft Post Disclosure |
| CVE-2016-10949 | RE Relevanssi Relevanssi | 8.8 | Sep 13 | The Relevanssi Premium plugin before 1.14.6.1 for WordPress has SQL injection with resultant unsafe unserialization |
| CVE-2018-9034 | RE Relevanssi Relevanssi | 5.4 | Apr 4 | Cross-site scripting (XSS) vulnerability in lib/interface.php of the Relevanssi plugin 4.0.4 for WordPress allows remote attackers to inject arbitrary JavaScript or HTML via the… |
| CVE-2017-1000225 | RE Relevanssi Relevanssi | 6.1 | Nov 17 | Reflected XSS in Relevanssi Premium version 1.14.8 when using relevanssi_didyoumean() could allow unauthenticated attacker to do almost anything an admin can |
| CVE-2017-1000038 | RE Relevanssi Relevanssi | 6.1 | Jul 17 | WordPress plugin Relevanssi version 3.5.7.1 is vulnerable to stored XSS resulting in attacker being able to execute JavaScript on the affected site |
| CVE-2014-9443 | RE Relevanssi Relevanssi | – | Jan 2 | Cross-site scripting (XSS) vulnerability in the Relevanssi plugin before 3.3.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors |