CVE-2023-7199

The Relevanssi WordPress plugin before 4.22.0, Relevanssi Premium WordPress plugin before 2.25.0 allows any unauthenticated user to read draft and private posts via a crafted request

Score

CVSS 3.1 5.3 Medium

Status

Modified - contact@wpscan.com

Published

2024-01-29

Last modified

2025-05-29

Weaknesses

CWE-639

Affected products

• Relevanssi (Relevanssi)
• Relevanssi (Unknown)
• Relevanssi Premium (Unknown)

References

• https://wpscan.com/vulnerability/0c96a128-4473-41f5-82ce-94bba33ca4a3/
• https://www.relevanssi.com/release-notes/premium-2-25-free-4-22-release-notes/