Relevanssi <= 4.24.4 (Free) - Unauthenticated SQL Injection

The Relevanssi – A Better Search plugin for WordPress is vulnerable to time-based SQL Injection via the cats and tags query parameters in all versions up to, and including, 4.24.4 Free and = 2.27.4 Premium due to insufficient escaping on the user supplied parameter and lack of sufficient...

WordPress Relevanssi – A Better Search plugin <= 4.28.3 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Yuto Hyakumoto in WordPress Plugin Relevanssi versions = 4.28.3...

Relevanssi (A Better Search) <= 4.22.0 - Query Log Export

The Relevanssi Search plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check in all versions up to, and including, 4.22.0. This makes it possible for unauthenticated attackers to export the query log data. id: CVE-2024-1380 info: name: Relevanssi A...

CVE-2026-97641

The Relevanssi – A Better Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 4.28.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary...

CVE-2026-103426

The Relevanssi Premium plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'rt' parameter in all versions up to, and including, 2.31.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2026-103426

The Relevanssi Premium plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 2.31.4 . The vulnerability exists because of insufficient input sanitization and output escaping of the '_rt' parameter . An unauthenticated attacker can inject arbit...

EUVD-2026-91249

The Relevanssi Premium plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'rt' parameter in all versions up to, and including, 2.31.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2026-103426 Relevanssi Premium <= 2.31.4 - Unauthenticated Stored Cross-Site Scripting via '_rt' Parameter

The Relevanssi Premium plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'rt' parameter in all versions up to, and including, 2.31.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2026-103426 Relevanssi Premium <= 2.31.4 - Unauthenticated Stored Cross-Site Scripting via '_rt' Parameter

The Relevanssi Premium plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'rt' parameter in all versions up to, and including, 2.31.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2026-97641

The Relevanssi – A Better Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 4.28.3 . The root cause is insufficient input sanitization and output escaping within the Comment Content feature. This flaw allows unauthenticated attacker...

EUVD-2026-91244

The Relevanssi – A Better Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 4.28.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary...

CVE-2026-97641 Relevanssi <= 4.28.3 - Unauthenticated Stored Cross-Site Scripting via Comment Content

The Relevanssi – A Better Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 4.28.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary...

CVE-2026-97641 Relevanssi <= 4.28.3 - Unauthenticated Stored Cross-Site Scripting via Comment Content

The Relevanssi – A Better Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 4.28.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary...

PT-2026-104120

The Relevanssi Premium plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ' rt' parameter in all versions up to, and including, 2.31.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

PT-2026-104153

The Relevanssi – A Better Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 4.28.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary...

CVE-2025-4396

CVE-2025-4396 — Relevanssi SQL 인젝션 시간 기반 블라인드 면책 조항: 이 저장소는 승인된 침투 테스트, 보안 연구 및 교육 목적으로만 제공됩니다. 컴퓨터 시스템에 대한 무단 접근은 불법이며 비윤리적입니다. 개요 Relevanssi 4.24.4 WordPress 플러그인의 시간 기반 블라인드 SQL 인젝션 취약점에 대한 개념 증명 익스플로잇입니다. 이 구현은 다음과 같은 강화된 환경을 특별히 다룹니다: 쉼표가 필터링됨 — 표준 SUBSTRstr, pos, len 및 IFcond, true, false 구...

CVE-2025-4396

CVE-2025-4396 – WordPress Relevanssi 시간 기반 블라인드 SQL 인젝션 툴킷 개요 이 저장소는 WordPress Relevanssi 플러그인의 cats 매개변수에 영향을 미치는 인증되지 않은 시간 기반 블라인드 SQL 인젝션 인 CVE-2025-4396 에 대한 실용적인 연구 및 검증 툴킷을 포함합니다. 이 프로젝트는 허가된 Purple Team 엔진 을 위해 제작되었으며, 다음 목적을 수행합니다. 통제된 환경에서 악용 가능성 검증, 다양한 공격자 기량 수준 시연, SOC 탐지 범위 측정, 현실적인...

CVE-2024-1380

CVE-2024-1380 Relevanssi – A Better Search = 4.22.0 - 인증되지 않은 쿼리 로그 내보내기에 대한 권한 확인 누락 설명 WordPress용 Relevanssi – A Better Search 플러그인은 4.22.0을 포함한 모든 버전에서 relevanssiexportlogcheck 함수에 대한 기능 확인 누락으로 인해 데이터에 대한 무단 액세스에 취약합니다. 이로 인해 인증되지 않은 공격자가 쿼리 로그 데이터를 내보낼 수 있습니다. 공급업체는 적절한 권한 제어를 위해 기능 확인 추가를 검...

WordPress Relevanssi plugin <= 4.28.1 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Mutantgun in WordPress Plugin Relevanssi versions = 4.28.1...

CVE-2026-19985

The Relevanssi – A Better Search plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 4.28.1 via the 's', 'posttypes', and 'orderby' request parameters. This is due to insufficient input sanitization and output escaping in the relevanssidebugarray...