Product by Comesio
Relevanssi – A Better Search
11 known vulnerabilities in Relevanssi – A Better Search (Comesio), 0 of them actively exploited (CISA KEV).
Key figures
11
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Medium | CVE-2024-1380 | Comesio Relevanssi: Missing Authorization | 5.3 | |
| High | CVE-2025-4396 | Relevanssi <= 4.24.4 (Free) and <= 2.27.5 (Premium) - Unauthenticated SQL Injection | 7.5 | |
| Medium | CVE-2026-19985 | Relevanssi <= 4.28.1 - Reflected Cross-Site Scripting | 6.1 | |
| High | CVE-2026-116522 | Comesio Relevanssi: Cross-site Scripting | 7.2 | |
| High | CVE-2026-97641 | Relevanssi <= 4.28.3 - Unauthenticated Stored Cross-Site Scripting via Comment Content | 7.2 | |
| Medium | CVE-2026-15941 | Relevanssi <= 4.27.1 and Relevanssi Premium <= 2.30.2 - Authenticated (Contributor+) SQL Injection | 6.5 | |
| Critical | CVE-2024-3214 | Relevanssi – A Better Search <= 4.22.1 - Unauthenticated Second Order CSV Injection | 5.8 | |
| High | CVE-2024-3213 | Comesio Relevanssi: Missing Authorization | 5.3 | |
| Medium | CVE-2025-4054 | Comesio Relevanssi: Cross-site Scripting | 6.1 | |
| High | CVE-2024-7630 | Relevanssi <= 4.22.2 (Free) and <= 2.25.1 (Premium) - Unauthenticated Information Exposure | 5.3 | |
| Medium | CVE-2025-5016 | Comesio Relevanssi: Cross-site Scripting | 4.7 |