Relevanssi Plugin Pre-Auth SQL Injection Vulnerability CVE-2026-15941

Vulnerability Overview Vulnerability Name: Relevanssi <= 4.27.1 and Relevanssi Premium <= 2.30.2 - Authentication (Contributor+) SQL Injection CVSS Score: 6.5 (Medium) CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N CVE Number: CVE-2026-15941 Release Date: August 4, 2026 Last Updated: August 5, 2026 Researcher: demo Affected Scope Affected Packages: - Relevanssi - A Better Search - Software Type: Plugin - Software Slug: relevanssi - Patched: Yes - Patched Version: 4.27.2 or later - Affected Versions: <= 4.27.1 - Relevanssi Premium - A Better Search - Software Type: Plugin - Software Slug: relevanssi-premium - Patched: Yes - Patched Version: 2.30.3 or later - Affected Versions: <= 2.30.2 Remediation Relevanssi: Upgrade to version 4.27.2 or later Relevanssi Premium: Upgrade to version 2.30.3 or later Additional Information Description: This plugin provides an admin search page that allows users with the capability to search within Relevanssi. The AJAX handler accepts a URL-encoded parameter, which is parsed into a , and then uses user-controlled taxonomy data to interpolate into the Relevanssi taxonomy limit builder. Although taxonomies are sanitized as text, they are not parameterized for SQL, allowing for interpolation in the term taxonomy lookup query. This allows an authenticated attacker at the contributor level to perform time-based blind SQL injection attacks via the admin search AJAX request. Reference Links: - plugins.trac.wordpress.org - plugins.trac.wordpress.org - plugins.trac.wordpress.org Share Options Facebook Twitter LinkedIn Email Copyright Information This record contains copyrighted material. Copyright © 2012-2026 Defiant Inc. Copyright © 1999-2026 The MITRE Corporation Contact For any errors or to add information, please contact: support@wordfence.com Business Hours 9am-8pm ET, 6am-5pm PT, and 2pm-1am UTC/GMT (excluding weekends and holidays) 24/7 customer support response with a 1-hour response time Other Links Terms of Service Privacy Policy and Notice of Collection Do Not Sell or Share My Personal Information Social Media Twitter Facebook YouTube Instagram Products and Support Wordfence Free Wordfence Premium Wordfence Care Wordfence Response Wordfence CLI Wordfence Intelligence Wordfence Central Support Documentation Learning Center Free Support Premium Support News Blog News Vulnerability Advisories About About Wordfence Affiliate Program Careers Contact Security CVE Request Form Subscribe Subscribe to receive news and updates from our team of experienced security professionals Enter email address Agree to Terms of Service and Privacy Policy Sign Up Copyright © 2012-2026 Defiant Inc. All Rights Reserved Sponsors Sucuri

Goal Reached Thanks to every supporter — we hit 100%!

Relevanssi Plugin Pre-Auth SQL Injection Vulnerability CVE-2026-15941

More from this source