Comesio Relevanssi – A Better Search

9 CVEs affecting Comesio Relevanssi – A Better Search. Latest disclosed: 2026-09-11. Critical: 0, High: 1.

Top CVEs affecting Comesio Relevanssi – A Better Search
CVESeverityScorePublishedSummary
CVE-2025-4396High7.52025-05-13The Relevanssi – A Better Search plugin for WordPress is vulnerable to time-based SQL Injection via the cats and tags query parameters in all versions up to, a…
CVE-2026-15941Medium6.52026-08-05The plugin provides an Admin Search page that allows users with the `edit_posts` capability to run Relevanssi searches from the WordPress dashboard. The AJAX h…
CVE-2026-19985Medium6.12026-09-11The Relevanssi – A Better Search plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 4.28.1 via the 's', 'po…
CVE-2025-4054Medium6.12025-05-07The Relevanssi – A Better Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the highlights functionality in all versions up to, and…
CVE-2024-3214Medium5.82024-04-09The Relevanssi – A Better Search plugin for WordPress is vulnerable to CSV Injection in all versions up to, and including, 4.22.1. This makes it possible for u…
CVE-2024-7630Medium5.32024-08-16The Relevanssi – A Better Search plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 4.22.2 (Free) and 2.25.1 (Pre…
CVE-2024-3213Medium5.32024-04-09The Relevanssi – A Better Search plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the relevanssi_up…
CVE-2024-1380Medium5.32024-03-13The Relevanssi – A Better Search plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the relevanssi_export_l…
CVE-2025-5016Medium4.72025-05-31The Relevanssi – A Better Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Excerpt Highlights in all versions up to, and includ…