Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2023-7199

Relevanssi (Free < 4.22.0, Premium < 2.25.0) - Unauthenticated Private/Draft Post Disclosure

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The Relevanssi WordPress plugin before 4.22.0, Relevanssi Premium WordPress plugin before 2.25.0 allows any unauthenticated user to read draft and private posts via a crafted request

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Relevanssi

Default version status: unaffected

  • 0 to < 4.22.0affected

Unknown Relevanssi Premium

Default version status: unaffected

  • 0 to < 2.25.0affected

References