Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2025-06-02
CVE-2025-5016 - A Better Search Plugin
The Relevanssi – A Better Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Excerpt Highlights in all versions up to, and including, 4.24.5 (Free) and 2.27.6 (Premium) due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
PLUGIN
A Better Search
CVE-2025-5016
Risk Score
Threat Entry
Updated 2025-05-13
CVE-2025-4396 - A Better Search Plugin
The Relevanssi – A Better Search plugin for WordPress is vulnerable to time-based SQL Injection via the cats and tags query parameters in all versions up to, and including, 4.24.4 (Free) and
PLUGIN
A Better Search
CVE-2025-4396
Risk Score
Threat Entry
Updated 2025-05-07
CVE-2025-4054 - A Better Search Plugin
The Relevanssi – A Better Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the highlights functionality in all versions up to, and including, 4.24.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page via the search results.
PLUGIN
A Better Search
CVE-2025-4054
Risk Score
Threat Entry
Updated 2025-01-29
CVE-2024-7630 - A Better Search Plugin
The Relevanssi – A Better Search plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 4.22.2 via the relevanssi_do_query() due to insufficient limitations on the posts that are returned when searching. This makes it possible for unauthenticated attackers to extract potentially sensitive information from password protected posts.
PLUGIN
A Better Search
CVE-2024-7630
Risk Score
Threat Entry
Updated 2025-01-28
CVE-2024-3214 - A Better Search Plugin
The Relevanssi – A Better Search plugin for WordPress is vulnerable to CSV Injection in all versions up to, and including, 4.22.1. This makes it possible for unauthenticated attackers to embed untrusted input into exported CSV files, which can result in code execution when these files are downloaded and opened on a local system with a vulnerable configuration.
PLUGIN
A Better Search
CVE-2024-3214
Risk Score
Threat Entry
Updated 2025-02-04
CVE-2024-3213 - A Better Search Plugin
The Relevanssi – A Better Search plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the relevanssi_update_counts() function in all versions up to, and including, 4.22.1. This makes it possible for unauthenticated attackers to execute expensive queries on the application that could lead into DOS.
PLUGIN
A Better Search
CVE-2024-3213
Risk Score
Threat Entry
Updated 2025-01-31
CVE-2024-1380 - A Better Search Plugin
The Relevanssi – A Better Search plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the relevanssi_export_log_check() function in all versions up to, and including, 4.22.0. This makes it possible for unauthenticated attackers to export the query log data. The vendor has indicated that they may look into adding a capability check for proper authorization control, however, this vulnerability is theoretically patched as is.
PLUGIN
A Better Search
CVE-2024-1380
Risk Score