CVE-2025-4396

HIGH EXPLOITED NUCLEI

Relevanssi - A Better Search <4.24.4, <=2.27.4 - SQL Injection

Title source: llm

Description

The Relevanssi – A Better Search plugin for WordPress is vulnerable to time-based SQL Injection via the cats and tags query parameters in all versions up to, and including, 4.24.4 (Free) and <= 2.27.5 (Premium) due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries to already existing queries that can be used to extract sensitive information from the database.

Exploits (1)

nomisec WORKING POC
by Nefhara · poc
https://github.com/Nefhara/CVE-2025-4396

Nuclei Templates (1)

Relevanssi <= 4.24.4 (Free) - Unauthenticated SQL Injection
HIGHVERIFIEDby iamnoooob,rootxharsh,pdresearch

References (5)

Scores

CVSS v3 7.5
EPSS 0.2197
EPSS Percentile 95.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

VulnCheck KEV 2026-02-02
CWE
CWE-89
Status published
Products (4)
comesio/Relevanssi – A Better Search < 4.24.4
msaari/Relevanssi – A Better Search < 4.24.4
Relevanssi/Relevanssi – A Better Search (Pro) < 2.27.4
Relevanssi/Relevanssi Premium < 2.27.5
Published May 13, 2025
Tracked Since Feb 18, 2026