Description
The Relevanssi WordPress plugin before 4.22.0, Relevanssi Premium WordPress plugin before 2.25.0 allows any unauthenticated user to read draft and private posts via a crafted request
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Relevanssi | < 4.22.0 | 4.22.0 |
| — | Relevanssi Premium | < 2.25.0 | 2.25.0 |
References
- https://wpscan.com/vulnerability/0c96a128-4473-41f5-82ce-94bba33ca4a3/ exploit vdb-entry technical-description
- https://www.relevanssi.com/release-notes/premium-2-25-free-4-22-release-notes/