Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 25
Reset filtersRelevanssi <= 4.28.3 - Unauthenticated Stored Cross-Site Scripting via Comment Content
Relevanssi <= 4.28.1 - Reflected Cross-Site Scripting
Relevanssi <= 4.27.1 and Relevanssi Premium <= 2.30.2 - Authenticated (Contributor+) SQL Injection
Relevanssi Light <= 1.2.2 - Unauthenticated SQL Injection
Relevanssi < 4.26.0 (Free) < 2.29.0 (Premium) - Authenticated (Contributor+) SQL Injection
Relevanssi <= 4.24.5 (Free) and <= 2.27.6 (Premium) - Unauthenticated Stored Cross-Site Scripting via Excerpt Highlights
Relevanssi <= 4.24.4 (Free) and <= 2.27.5 (Premium) - Unauthenticated SQL Injection
Relevanssi <= 4.24.3 (Free) and <= 2.27.4 (Premium) - Unauthenticated Stored Cross-Site Scripting via Search Highlights
Relevanssi – A Better Search <= 4.23.0 (Free) and <= 2.26.0 (Premium) - Authenticated (Contributor+) Stored Cross-Site Scripting
Relevanssi Live Ajax Search <= 2.4 - Unauthenticated WP_Query Argument Injection
Relevanssi <= 4.22.2 (Free) and <= 2.25.1 (Premium) - Unauthenticated Information Exposure
Relevanssi – A Better Search <= 4.22.1 - Missing Authorization to Unauthenticated Count Option Update
Relevanssi – A Better Search <= 4.22.1 - Unauthenticated Second Order CSV Injection
Relevanssi – A Better Search <= 4.22.0 (Free) and <= 2.25.0 (Premium) - Missing Authorization to Unauthenticated Query Log Export
Relevanssi Pro < 2.25 - Unauthenticated Sensitive Information Exposure
Relevanssi <= 4.21.2 (Free) and < 2.25.0 (Premium) - Missing Authorization to Unauthorized Post Access
Relevanssi – A Better Search < 4.14.6 & Relevanssi – A Better Search Pro < 2.16.5 - Missing Authorization
Relevanssi - A Better Search Free & Premium <= 2.16.3 & 4.14.3 - Stored Cross-Site Scripting
Relevanssi <= 3.6.0 - Authenticated (Admin+) SQL Injection
Relevanssi <= 4.0.4 - Cross-Site Scripting
Relevanssi – A Better Search <= 3.5.7.1 - Stored Cross-Site Scripting
Relevanssi Premium < 1.14.6.1 - SQL Injection
Relevanssi – A Better Search < 3.3.8 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.