Relevanssi Premium

Relevanssi Premium has 16 disclosed vulnerabilities in the WordSec catalog, reported between 2016 and 2026; all 16 are fixed as of October 2026. Their average CVSS score is 6.2, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 4 high. 2024 was the busiest year with 7 disclosures.

The most common weakness is Improper Neutralization Of Input During Web Page Generation, behind 5 of the records (31%). Other recurring categories include Improper Neutralization Of Special Elements Used In An SQL Command, Missing Authorization.

Every one of the 16 issues recorded for Relevanssi Premium has a vendor fix available, so running the current release closes all known holes.

11 independent researchers contributed these findings, most of them (3) reported by Jack Taylor.

Strategic Overview

Avg CVSSMedium

6.2/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Relevanssi Premium vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2016-10949

Relevanssi Premium < 1.14.6.1 - SQL Injection

Read the full analysis

Vulnerability Records

16 records


2026-10-01 19:23	Relevanssi Premium <= 2.31.4 - Unauthenticated Stored Cross-Site Scripting via '_rt' Parameter Relevanssi Premium <= 2.31.4	`CVE-2026-103426`	7.2 High	Philipp Doblhofer	Yes
2026-08-04 16:34	Relevanssi <= 4.27.1 and Relevanssi Premium <= 2.30.2 - Authenticated (Contributor+) SQL Injection Relevanssi Premium <= 2.30.2	`CVE-2026-15941`	6.5 Medium	daroo	Yes
2025-12-17 00:00	Relevanssi < 4.26.0 (Free) < 2.29.0 (Premium) - Authenticated (Contributor+) SQL Injection Relevanssi Premium < 2.29.0	`CVE-2025-14719`	6.5 Medium	Drew Webber (mcdruid)	Yes
2025-05-30 14:49	Relevanssi <= 4.24.5 (Free) and <= 2.27.6 (Premium) - Unauthenticated Stored Cross-Site Scripting via Excerpt Highlights Relevanssi Premium <= 2.27.6	`CVE-2025-5016`	4.7 Medium	Jack Taylor	Yes
2025-05-12 14:38	Relevanssi <= 4.24.4 (Free) and <= 2.27.5 (Premium) - Unauthenticated SQL Injection Relevanssi Premium <= 2.27.5	`CVE-2025-4396`	7.5 High	Jack Taylor	Yes
2025-05-06 13:45	Relevanssi <= 4.24.3 (Free) and <= 2.27.4 (Premium) - Unauthenticated Stored Cross-Site Scripting via Search Highlights Relevanssi Premium <= 2.27.4	`CVE-2025-4054`	6.1 Medium	Jack Taylor	Yes
2024-09-17 00:00	Relevanssi – A Better Search <= 4.23.0 (Free) and <= 2.26.0 (Premium) - Authenticated (Contributor+) Stored Cross-Site Scripting Relevanssi Premium <= 2.26.0	`CVE-2024-9021`	6.4 Medium	Krugov Artyom	Yes
2024-08-15 13:29	Relevanssi <= 4.22.2 (Free) and <= 2.25.1 (Premium) - Unauthenticated Information Exposure Relevanssi Premium <= 2.25.1	`CVE-2024-7630`	5.3 Medium	stealthcopter	Yes
2024-04-04 00:00	Relevanssi – A Better Search <= 4.22.1 - Unauthenticated Second Order CSV Injection Relevanssi Premium <= 2.25.1	`CVE-2024-3214`	5.8 Medium	Thura Moe Myint (mgthuramoemyint)	Yes
2024-04-04 00:00	Relevanssi – A Better Search <= 4.22.1 - Missing Authorization to Unauthenticated Count Option Update Relevanssi Premium <= 2.25.1	`CVE-2024-3213`	5.3 Medium	Thura Moe Myint (mgthuramoemyint)	Yes

Showing 1–10 of 16 reports