Known Vulnerabilities for products from Relevanssi

Listed below are 10 of the newest known vulnerabilities associated with the vendor "Relevanssi".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2025-4396 json Not Provided 2025-05-13 2026-04-08
CVE-2025-4054 json Not Provided 2025-05-07 2026-04-08
CVE-2024-7630 json The Relevanssi – A Better Search plugin for WordPress is vulnerable to Information Exposure in all versions up to, and incl... Not Provided 2024-08-16 2026-04-08
CVE-2024-3214 json The Relevanssi – A Better Search plugin for WordPress is vulnerable to CSV Injection in all versions up to, and including, ... Not Provided 2024-04-09 2026-04-08
CVE-2024-3213 json The Relevanssi – A Better Search plugin for WordPress is vulnerable to unauthorized modification of data due to a missing c... Not Provided 2024-04-09 2026-04-08
CVE-2024-1380 json The Relevanssi – A Better Search plugin for WordPress is vulnerable to unauthorized access of data due to a missing capabil... Not Provided 2024-03-13 2026-04-08
CVE-2023-7199 json 5.3 - MEDIUM 2024-01-29 2024-02-03
CVE-2018-9034 json Cross-site scripting (XSS) vulnerability in lib/interface.php of the Relevanssi plugin 4.0.4 for WordPress allows remote atta... 5.4 - MEDIUM 2018-04-04 2018-05-09
CVE-2017-1000225 json Reflected XSS in Relevanssi Premium version 1.14.8 when using relevanssi_didyoumean() could allow unauthenticated attacker to... 6.1 - MEDIUM 2017-11-17 2017-12-01
CVE-2017-1000038 json WordPress plugin Relevanssi version 3.5.7.1 is vulnerable to stored XSS resulting in attacker being able to execute JavaScrip... 6.1 - MEDIUM 2017-07-17 2017-07-20
CVE-2016-10949 json The Relevanssi Premium plugin before 1.14.6.1 for WordPress has SQL injection with resultant unsafe unserialization. 8.8 - HIGH 2019-09-13 2019-09-16
CVE-2014-9443 json Cross-site scripting (XSS) vulnerability in the Relevanssi plugin before 3.3.8 for WordPress allows remote attackers to injec... 4.3 - MEDIUM 2015-01-02 2015-01-05

Known software with vulnerabilities from Relevanssi

Type Vendor Product Version
ApplicationRelevanssiRelevanssi1.0