WordPress plugin
Relevanssi Premium security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 16 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High4
- Medium12
- Low0
All Relevanssi Premium vulnerabilities
- High7.2Unauthenticated Stored Cross-Site Scripting via '_rt' Parameter
≤2.31.4Update to 2.31.5
- Medium6.5Authenticated (Contributor+) SQL Injection
≤2.30.2Update to 2.30.3
- Medium6.5Authenticated (Contributor+) SQL Injection
<2.29.0Update to 2.29.0
- Medium4.7Unauthenticated Stored Cross-Site Scripting via Excerpt Highlights
≤2.27.6Update to 2.27.7
- High7.5Unauthenticated SQL Injection
≤2.27.5Update to 2.27.6
- Medium6.1Unauthenticated Stored Cross-Site Scripting via Search Highlights
≤2.27.4Update to 2.27.5
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤2.26.0Update to 2.26.1
- Medium5.3Unauthenticated Information Exposure
≤2.25.1Update to 2.25.2
- Medium5.3Missing Authorization to Unauthenticated Count Option Update
≤2.25.1Update to 2.25.2
- Medium5.8Unauthenticated Second Order CSV Injection
≤2.25.1Update to 2.25.2
- Medium5.3Missing Authorization to Unauthenticated Query Log Export
≤2.25.0Update to 2.25.1
- Medium5.3Unauthenticated Sensitive Information Exposure
<2.25Update to 2.25
- Medium5.3Missing Authorization to Unauthorized Post Access
<2.25.0Update to 2.25.0
- Medium6.3Missing Authorization
<2.16.5Update to 2.16.5
- High7.2A Better Search Free & Premium <= 2.16.3 & 4.14.3 - Stored Cross-Site Scripting
<2.16.3Update to 2.16.4
- High8.8SQL Injection
<1.14.6.1Update to 1.14.6.1
Relevanssi Premium: common questions
Does Relevanssi Premium have known vulnerabilities?
Yes. VulnCrest Radar lists 16 known vulnerabilities in Relevanssi Premium: 4 high, 12 medium. None are known to affect version null.
How do I check which version of Relevanssi Premium I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Relevanssi Premium vulnerability?
CVE-2026-103426, published Oct 1, 2026: Relevanssi Premium <= 2.31.4 - Unauthenticated Stored Cross-Site Scripting via '_rt' Parameter. Severity: High (CVSS 7.2).
Is any Relevanssi Premium vulnerability listed in CISA KEV?
No. None of the known Relevanssi Premium vulnerabilities is currently listed in the CISA KEV catalog.