Skip to content
Sign in
4.9 Medium

CVE-2025-14719 The Relevanssi WordPress plugin before 4.26.0, Relevanssi Premium WordPress plugin before 2.29.0 do not sanitize and…

Description

The Relevanssi WordPress plugin before 4.26.0, Relevanssi Premium WordPress plugin before 2.29.0 do not sanitize and escape a parameter before using it in a SQL statement, allowing contributor and above roles to perform SQL injection attacks

Affected products and versions

Product Affected versions Fixed in
Relevanssi 4.26 earliest → < 4.26.0 4.26.0
Relevanssi Premium 2.29 earliest → < 2.29.0 2.29.0

Other CVEs of Relevanssi

The 3 CVEs of Relevanssi →
CVE-2024-9021 In the process of testing the Relevanssi WordPress plugin before 4.23.1, a vulnerability was found that allows you to… 5.4 Medium CVE-2023-7199 The Relevanssi WordPress plugin before 4.22.0, Relevanssi Premium WordPress plugin before 2.25.0 allows any… 5.3 Medium
Track this CVE