CVE Database /
CVE-2024-1380
CVE · Medium
CVE-2024-1380 — Relevanssi – A Better Search [relevanssi] < 4.22.1
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-1380
|
Relevanssi – A Better Search [relevanssi] < 4.22.1 |
Missing Authorization |
Medium
5.3
|
< 4.22.1
|
4.22.1 |
2024-02-22 |
—
|
CVE-2024-1380
The Relevanssi – A Better Search plugin for WordPress contains an authorization bypass in the relevanssi_export_log_check() function affecting versions up to 4.22.0 (Free) and 2.25.0 (Premium). Unauthenticated attackers can exploit the missing capability check to export query log data. The vulnerability was addressed in subsequent versions, though the vendor acknowledged that additional authorization controls could be implemented for better security.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings