Vendor
Relevanssi
16 known vulnerabilities in products by Relevanssi, 0 of them actively exploited (CISA KEV).
Key figures
16
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Medium | CVE-2024-1380 | Comesio Relevanssi: Missing Authorization | 5.3 | |
| High | CVE-2025-4396 | Relevanssi <= 4.24.4 (Free) and <= 2.27.5 (Premium) - Unauthenticated SQL Injection | 7.5 | |
| High | CVE-2016-10949 | Relevanssi: SQL Injection | 8.8 | |
| Medium | CVE-2018-9034 | Relevanssi: Cross-Site Scripting (XSS) | 5.4 | |
| High | CVE-2026-103426 | Relevanssi Premium <= 2.31.4 - Unauthenticated Stored Cross-Site Scripting via '_rt' Parameter | 7.2 | |
| Medium | CVE-2026-15941 | Relevanssi <= 4.27.1 and Relevanssi Premium <= 2.30.2 - Authenticated (Contributor+) SQL Injection | 6.5 | |
| Medium | CVE-2017-1000038 | Relevanssi: Cross-Site Scripting (XSS) | 6.1 | |
| Critical | CVE-2024-3214 | Relevanssi – A Better Search <= 4.22.1 - Unauthenticated Second Order CSV Injection | 5.8 | |
| High | CVE-2024-3213 | Comesio Relevanssi: Missing Authorization | 5.3 | |
| Medium | CVE-2017-1000225 | Relevanssi: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2023-7199 | Relevanssi (Free < 4.22.0, Premium < 2.25.0) - Unauthenticated Private/Draft Post Disclosure | 5.3 | |
| Medium | CVE-2025-4054 | Comesio Relevanssi: Cross-site Scripting | 6.1 | |
| High | CVE-2024-7630 | Relevanssi <= 4.22.2 (Free) and <= 2.25.1 (Premium) - Unauthenticated Information Exposure | 5.3 | |
| Not rated | CVE-2014-9443 | Relevanssi: Cross-Site Scripting (XSS) | — | |
| Medium | CVE-2024-9021 | Relevanssi < 4.23.1 - Contributor+ Stored XSS | 5.4 | |
| Medium | CVE-2025-5016 | Comesio Relevanssi: Cross-site Scripting | 4.7 |
Products
| Relevanssi | 11 | 0 |
| Relevanssi Premium | 8 | 0 |