Exploit for CVE-2025-4396

CVE-2025-4396 Exploit: Relevanssi SQL Injection Time-Based...

CVE-2025-4396

The Relevanssi – A Better Search plugin for WordPress is vulnerable to time-based SQL Injection via the cats and tags query parameters in all versions up to, and including, 4.24.4 Free and = 2.27.5 Premium due to insufficient escaping on the user supplied parameter and lack of sufficient...

CVE-2025-4396

creationtimestamp| type| source ---|---|--- 2025-05-13 06:47:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lozvazfzyj2o 2025-05-13 07:10:50+00:00| seen| https://t.me/cvedetector/25165 2025-05-13 14:16:26+00:00| confirmed|...

WordPress Relevanssi plugin <= 4.24.4 - Unauthenticated SQL Injection

Unauthenticated SQL Injection vulnerability discovered by Jack Taylor in WordPress Plugin Relevanssi versions = 4.24.4...

WordPress Relevanssi Premium plugin <= 2.27.4 - Unauthenticated SQL Injection

Unauthenticated SQL Injection vulnerability discovered by Jack Taylor in WordPress Plugin Relevanssi Premium versions = 2.27.4...