en
Severity across 8 analyzed records
A short verification protects source data and prevents automated AI requests.
The GCVE catalog currently lists 15 vulnerability records associated with Relevanssi.
Among the 8 records analyzed by CyStack, 1 are High or Critical and 0 appear in the CISA KEV catalog for priority remediation.
The list below is based on vulnerabilities that have been viewed and analyzed; it does not represent the complete global vulnerability corpus. Use the product filter to narrow the scope.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
| CVE | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-15941Relevanssi <= 4.27.1 and Relevanssi Premium <= 2.30.2 - Authenticated (Contributor+) SQL Injection | Exploitation statusNot known exploited | FixYes | Affected productRelevanssi Premium – A Better Search | Published08/05/2026 | SeverityMedium |
CVE-2025-5016Relevanssi <= 4.24.5 (Free) and <= 2.27.6 (Premium) - Unauthenticated Stored Cross-Site Scripting via Excerpt Highlights | Exploitation statusNot known exploited | FixYes | Affected productRelevanssi Premium | Published05/31/2025 | SeverityMedium |
CVE-2025-4396Relevanssi <= 4.24.4 (Free) and <= 2.27.5 (Premium) - Unauthenticated SQL Injection | Exploitation statusNot known exploited | FixYes | Affected productRelevanssi Premium | Published05/13/2025 | SeverityHigh |
CVE-2025-4054Relevanssi <= 4.24.3 (Free) and <= 2.27.4 (Premium) - Unauthenticated Stored Cross-Site Scripting via Search Highlights | Exploitation statusNot known exploited | FixYes | Affected productRelevanssi Premium | Published05/07/2025 | SeverityMedium |
CVE-2024-9021Relevanssi < 4.23.1 - Contributor+ Stored XSS | Exploitation statusPublic exploit | FixYes | Affected productRelevanssi | Published10/08/2024 | SeverityMedium |
CVE-2024-7630Relevanssi <= 4.22.2 (Free) and <= 2.25.1 (Premium) - Unauthenticated Information Exposure | Exploitation statusNot known exploited | FixYes | Affected productRelevanssi Premium | Published08/16/2024 | SeverityMedium |
CVE-2024-3213Relevanssi – A Better Search <= 4.22.1 - Missing Authorization to Unauthenticated Count Option Update | Exploitation statusNot known exploited | FixYes | Affected productRelevanssi Premium | Published04/09/2024 | SeverityMedium |
CVE-2024-3214Relevanssi – A Better Search <= 4.22.1 - Unauthenticated Second Order CSV Injection | Exploitation statusNot known exploited | FixYes | Affected productRelevanssi Premium | Published04/09/2024 | SeverityMedium |
CVE-2024-1380Relevanssi – A Better Search <= 4.22.0 (Free) and <= 2.25.0 (Premium) - Missing Authorization to Unauthenticated Query Log Export | Exploitation statusNot known exploited | FixYes | Affected productRelevanssi Premium | Published03/13/2024 | SeverityMedium |
CVE-2023-7199Relevanssi (Free < 4.22.0, Premium < 2.25.0) - Unauthenticated Private/Draft Post Disclosure | Exploitation statusPublic exploit | FixYes | Affected productRelevanssi | Published01/29/2024 | SeverityMedium |
CVE-2016-10949CVE-2016-10949 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published09/13/2019 | SeverityUnknown |
CVE-2018-9034CVE-2018-9034 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published04/04/2018 | SeverityUnknown |
CVE-2017-1000225CVE-2017-1000225 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published11/17/2017 | SeverityUnknown |
CVE-2017-1000038CVE-2017-1000038 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published07/13/2017 | SeverityUnknown |
CVE-2014-9443CVE-2014-9443 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published01/02/2015 | SeverityUnknown |
