Skip to content
OpenAdvisories

Vendor

comesio

12 known vulnerabilities.

Products

Relevanssi – A Better Search 11 Relevanssi Live Ajax Search 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.2
    CVE-2026-116522

    Relevanssi <= 4.28.5 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Late Entity Decode

    The Relevanssi – A Better Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 4.28.5 due to insufficient input sanitization and output escaping. This makes it possible for …

    comesio Relevanssi – A Better Search Web / CMS
  • High 7.2
    CVE-2026-97641

    Relevanssi <= 4.28.3 - Unauthenticated Stored Cross-Site Scripting via Comment Content

    The Relevanssi – A Better Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 4.28.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthen…

    comesio Relevanssi – A Better Search Web / CMS
  • High 7.5
    CVE-2025-4396 Public exploit Scanner template

    Relevanssi <= 4.24.4 (Free) and <= 2.27.5 (Premium) - Unauthenticated SQL Injection

    The Relevanssi – A Better Search plugin for WordPress is vulnerable to time-based SQL Injection via the cats and tags query parameters in all versions up to, and including, 4.24.4 (Free) and <= 2.27.5 (Premium) due to insufficient escaping on the user supplie…

    comesio Relevanssi Relevanssi – A Better Search Relevanssi Premium Web / CMS