PT-2026-1561 · WordPress · Relevanssi Premium+1

Drew Webber · Publicado 2026-01-07 · Atualizado 2026-01-07 · CVE-2025-14719

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Média

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Relevanssi WordPress plugin versions prior to 4.26.0 Relevanssi Premium WordPress plugin versions prior to 2.29.0

Description The Relevanssi and Relevanssi Premium WordPress plugins do not properly sanitize and escape a parameter before its use in a SQL statement. This allows users with contributor roles or higher to execute SQL injection attacks. The vulnerable parameter is used within a SQL query, potentially allowing malicious code to be injected and executed on the database server.

Recommendations Update Relevanssi to version 4.26.0 or later. Update Relevanssi Premium to version 2.29.0 or later.

Exploit

Correção

Identificadores relacionados

CVE-2025-14719

Produtos afetados

Relevanssi

Relevanssi Premium

Referências · 3

• 🔥 https://wpscan.com/vulnerability/bd8e27c7-8f97-4313-b16e-50ac6f0676f5 · Exploit
• https://twitter.com/CVEnew/status/2008787434633392221 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-14719 · Nota de Segurança