Relevanssi Premium – A Better Search

Relevanssi Premium – A Better Search has 15 disclosed vulnerabilities in the WordSec catalog, reported between 2016 and 2026; all 15 are fixed as of September 2026. Their average CVSS score is 6.2, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 3 high. 2024 was the busiest year with 7 disclosures.

The most common weakness is Cross-Site Scripting, behind 4 of the records (27%). Other recurring categories include SQL Injection, Missing Authorization.

Every one of the 15 issues recorded for Relevanssi Premium – A Better Search has a vendor fix available, so running the current release closes all known holes.

10 independent researchers contributed these findings, most of them (3) reported by Jack Taylor.

Strategic Overview

Avg CVSSMedium

6.2/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Relevanssi Premium – A Better Search vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2016-10949

Relevanssi Premium < 1.14.6.1 - SQL Injection

Read the full analysis

Vulnerability Records

15 records


2026-08-04 16:34	Relevanssi <= 4.27.1 and Relevanssi Premium <= 2.30.2 - Authenticated (Contributor+) SQL Injection Relevanssi Premium <= 2.30.2	`CVE-2026-15941`	6.5 Medium	daroo	Yes
2025-12-17 00:00	Relevanssi < 4.26.0 (Free) < 2.29.0 (Premium) - Authenticated (Contributor+) SQL Injection Relevanssi Premium < 2.29.0	`CVE-2025-14719`	6.5 Medium	Drew Webber (mcdruid)	Yes
2025-05-30 14:49	Relevanssi <= 4.24.5 (Free) and <= 2.27.6 (Premium) - Unauthenticated Stored Cross-Site Scripting via Excerpt Highlights Relevanssi Premium <= 2.27.6	`CVE-2025-5016`	4.7 Medium	Jack Taylor	Yes
2025-05-12 14:38	Relevanssi <= 4.24.4 (Free) and <= 2.27.5 (Premium) - Unauthenticated SQL Injection Relevanssi Premium <= 2.27.5	`CVE-2025-4396`	7.5 High	Jack Taylor	Yes
2025-05-06 13:45	Relevanssi <= 4.24.3 (Free) and <= 2.27.4 (Premium) - Unauthenticated Stored Cross-Site Scripting via Search Highlights Relevanssi Premium <= 2.27.4	`CVE-2025-4054`	6.1 Medium	Jack Taylor	Yes
2024-09-17 00:00	Relevanssi – A Better Search <= 4.23.0 (Free) and <= 2.26.0 (Premium) - Authenticated (Contributor+) Stored Cross-Site Scripting Relevanssi Premium <= 2.26.0	`CVE-2024-9021`	6.4 Medium	Krugov Artyom	Yes
2024-08-15 13:29	Relevanssi <= 4.22.2 (Free) and <= 2.25.1 (Premium) - Unauthenticated Information Exposure Relevanssi Premium <= 2.25.1	`CVE-2024-7630`	5.3 Medium	stealthcopter	Yes
2024-04-04 00:00	Relevanssi – A Better Search <= 4.22.1 - Unauthenticated Second Order CSV Injection Relevanssi Premium <= 2.25.1	`CVE-2024-3214`	5.8 Medium	Thura Moe Myint (mgthuramoemyint)	Yes
2024-04-04 00:00	Relevanssi – A Better Search <= 4.22.1 - Missing Authorization to Unauthenticated Count Option Update Relevanssi Premium <= 2.25.1	`CVE-2024-3213`	5.3 Medium	Thura Moe Myint (mgthuramoemyint)	Yes
2024-02-22 00:00	Relevanssi – A Better Search <= 4.22.0 (Free) and <= 2.25.0 (Premium) - Missing Authorization to Unauthenticated Query Log Export Relevanssi Premium <= 2.25.0	`CVE-2024-1380`	5.3 Medium	Krzysztof Zając	Yes

Showing 1–10 of 15 reports