Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
RelevanssiRelevanssi

11 matches found

CVE
CVE•added 2019/09/13 1:15 p.m.•89 views

CVE-2016-10949

The Relevanssi Premium plugin before 1.14.6.1 for WordPress has SQL injection with resultant unsafe unserialization.

8.8CVSS9.1AI score0.00592EPSS
CVE
CVE•added 2024/03/13 4:15 p.m.•47 views

CVE-2024-1380

The Relevanssi – A Better Search plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the relevanssi_export_log_check() function in all versions up to, and including, 4.22.0. This makes it possible for unauthenticated attackers to export the query l...

5.3CVSS5.4AI score0.87915EPSS
CVE
CVE•added 2024/04/09 7:15 p.m.•47 views

CVE-2024-3214

The Relevanssi – A Better Search plugin for WordPress is vulnerable to CSV Injection in all versions up to, and including, 4.22.1. This makes it possible for unauthenticated attackers to embed untrusted input into exported CSV files, which can result in code execution when these files are downloade...

9.8CVSS9.3AI score0.01798EPSS
CVE
CVE•added 2024/04/09 7:15 p.m.•42 views

CVE-2024-3213

The Relevanssi – A Better Search plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the relevanssi_update_counts() function in all versions up to, and including, 4.22.1. This makes it possible for unauthenticated attackers to execute expensi...

8.2CVSS6.2AI score0.00338EPSS
CVE
CVE•added 2018/04/04 7:29 p.m.•41 views

CVE-2018-9034

Cross-site scripting (XSS) vulnerability in lib/interface.php of the Relevanssi plugin 4.0.4 for WordPress allows remote attackers to inject arbitrary JavaScript or HTML via the tab GET parameter.

5.4CVSS5.4AI score0.00143EPSS
CVE
CVE•added 2017/11/17 5:29 a.m.•39 views

CVE-2017-1000225

Reflected XSS in Relevanssi Premium version 1.14.8 when using relevanssi_didyoumean() could allow unauthenticated attacker to do almost anything an admin can

6.1CVSS6AI score0.0061EPSS
CVE
CVE•added 2017/07/17 1:18 p.m.•37 views

CVE-2017-1000038

WordPress plugin Relevanssi version 3.5.7.1 is vulnerable to stored XSS resulting in attacker being able to execute JavaScript on the affected site

6.1CVSS6AI score0.0104EPSS
CVE
CVE•added 2024/01/29 3:15 p.m.•36 views

CVE-2023-7199

The Relevanssi WordPress plugin before 4.22.0, Relevanssi Premium WordPress plugin before 2.25.0 allows any unauthenticated user to read draft and private posts via a crafted request

5.3CVSS5.1AI score0.00438EPSS
CVE
CVE•added 2024/08/16 3:15 a.m.•36 views

CVE-2024-7630

The Relevanssi – A Better Search plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 4.22.2 via the relevanssi_do_query() due to insufficient limitations on the posts that are returned when searching. This makes it possible for unauthenticated attackers ...

7.5CVSS5.2AI score0.00695EPSS
CVE
CVE•added 2024/10/08 6:15 a.m.•36 views

CVE-2024-9021

In the process of testing the Relevanssi WordPress plugin before 4.23.1, a vulnerability was found that allows you to implement Stored XSS on behalf of the Contributor+ by embedding malicious script, which entails account takeover backdoor

5.4CVSS5.6AI score0.00022EPSS
CVE
CVE•added 2015/01/02 7:59 p.m.•35 views

CVE-2014-9443

Cross-site scripting (XSS) vulnerability in the Relevanssi plugin before 3.3.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

4.3CVSS5.9AI score0.00357EPSS