comesio vulnerabilities

CVEs per yearBy the year they were published

1. 20245
2. 20253
3. 20264

Newest CVEs

• CVE-2026-116522

  Relevanssi <= 4.28.5 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Late Entity Decode

  comesio · Relevanssi – A Better Search

  High7.2
• CVE-2026-97641

  Relevanssi <= 4.28.3 - Unauthenticated Stored Cross-Site Scripting via Comment Content

  comesio · Relevanssi – A Better Search

  High7.2
• CVE-2026-19985

  Relevanssi <= 4.28.1 - Reflected Cross-Site Scripting

  comesio · Relevanssi – A Better Search

  Medium6.1
• CVE-2026-15941

  Relevanssi <= 4.27.1 and Relevanssi Premium <= 2.30.2 - Authenticated (Contributor+) SQL Injection

  Relevanssi · Relevanssi Premium – A Better Search

  Medium6.5
• CVE-2025-5016

  Relevanssi <= 4.24.5 (Free) and <= 2.27.6 (Premium) - Unauthenticated Stored Cross-Site Scripting via Excerpt Highlights

  Relevanssi · Relevanssi Premium

  Medium4.7
• CVE-2025-4396

  Relevanssi <= 4.24.4 (Free) and <= 2.27.5 (Premium) - Unauthenticated SQL Injection

  Relevanssi · Relevanssi Premium

  High7.5
• CVE-2025-4054

  Relevanssi <= 4.24.3 (Free) and <= 2.27.4 (Premium) - Unauthenticated Stored Cross-Site Scripting via Search Highlights

  Relevanssi · Relevanssi Premium

  Medium6.1
• CVE-2024-7573

  Relevanssi Live Ajax Search <= 2.4 - Unauthenticated WP_Query Argument Injection

  comesio · Relevanssi Live Ajax Search

  Medium5.3
• CVE-2024-7630

  Relevanssi <= 4.22.2 (Free) and <= 2.25.1 (Premium) - Unauthenticated Information Exposure

  Relevanssi · Relevanssi Premium

  Medium5.3
• CVE-2024-3213

  Relevanssi – A Better Search <= 4.22.1 - Missing Authorization to Unauthenticated Count Option Update

  Relevanssi · Relevanssi Premium

  Medium5.3