Relevanssi – A Better Search, c9f5e1b2369a93bc990d545aff97629a10b54712
- CVE, Research URL
- Home page URL
- Application
- Published on
- Feb 15, 2022
- Research Description
- Relevanssi – A Better Search [relevanssi] < 4.14.6 Relevanssi – A Better Search < 4.14.6 & Relevanssi – A Better Search Pro < 2.16.5 - Missing Authorization The Relevanssi – A Better Search plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on several functions in versions before 4.14.6 in the free version and 2.16.5 in the PRO version. This makes it possible for authenticated attackers with Subscriber-level roles and above to perform unauthorized AJAX actions.
- Affected versions
-
max 4.14.6.
- Status
-
vulnerable