High · 7.2 CVE-2026-114704 EUVD-2026-109297GHSA-q53w-3673-wrjv

WordPress Relevanssi plugin <= 4.28.4 - PHP Object Injection vulnerability

Published Oct 24, 2026 · Updated Oct 24, 2026 · Assigned by Patchstack

Vendor: Christoph Vielgrader Product: Relevanssi

Description

Deserialization of Untrusted Data vulnerability in Christoph Vielgrader Relevanssi relevanssi allows Object Injection.This issue affects Relevanssi : from n/a through 4.28.4.

Affected products

Vendor	Product	Affected	Fixed
Christoph Vielgrader	Relevanssi	≤ 4.28.4	—

References

https://patchstack.com/database/wordpress/plugin/relevanssi/vulnerability/wordpress-relevanssi-plugin-4-28-4-php-object-injection-vulnerability?_s_id=cve vdb-entry