Comesio

9 CVEs across 2 Comesio products. Browse Comesio vulnerabilities, severities, and proof-of-concept exploits.

Comesio products with known CVEs

ProductCVEs
Relevanssi – A Better Search8
Relevanssi Live Ajax Search1
Comesio CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-15941Medium6.52026-08-05The plugin provides an Admin Search page that allows users with the `edit_posts` capability to run Relevanssi searches from the WordPress dashboard. The AJAX h…
CVE-2025-5016Medium4.72025-05-31The Relevanssi – A Better Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Excerpt Highlights in all versions up to, and includ…
CVE-2025-4396High7.52025-05-13The Relevanssi – A Better Search plugin for WordPress is vulnerable to time-based SQL Injection via the cats and tags query parameters in all versions up to, a…
CVE-2025-4054Medium6.12025-05-07The Relevanssi – A Better Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the highlights functionality in all versions up to, and…
CVE-2024-7573Medium5.32024-08-28The Relevanssi Live Ajax Search plugin for WordPress is vulnerable to argument injection in all versions up to, and including, 2.4. This is due to insufficient…
CVE-2024-7630Medium5.32024-08-16The Relevanssi – A Better Search plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 4.22.2 (Free) and 2.25.1 (Pre…
CVE-2024-3214Medium5.82024-04-09The Relevanssi – A Better Search plugin for WordPress is vulnerable to CSV Injection in all versions up to, and including, 4.22.1. This makes it possible for u…
CVE-2024-3213Medium5.32024-04-09The Relevanssi – A Better Search plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the relevanssi_up…
CVE-2024-1380Medium5.32024-03-13The Relevanssi – A Better Search plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the relevanssi_export_l…