Threat Entry Updated 2026-01-08

CVE-2025-14719 - Relevanssi Premium Plugin

The Relevanssi WordPress plugin before 4.26.0, Relevanssi Premium WordPress plugin before 2.29.0 do not sanitize and escape a parameter before using it in a SQL statement, allowing contributor and above roles to perform SQL injection attacks

PLUGIN Relevanssi Premium

CVE-2025-14719

MEDIUM CVSS 4.9 2026-01-07

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2025-05-29

CVE-2023-7199 - Relevanssi Premium Plugin

The Relevanssi WordPress plugin before 4.22.0, Relevanssi Premium WordPress plugin before 2.25.0 allows any unauthenticated user to read draft and private posts via a crafted request

PLUGIN Relevanssi Premium

CVE-2023-7199

MEDIUM CVSS 5.3 2024-01-29

Risk Score

Open Full Technical Breakdown