The Relevanssi – A Better Search plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the relevanssi_update_counts() function in all versions up to, and including, 4.22.1. This makes it possible for unauthenticated attackers to execute expensive queries on the application that could lead into DOS.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Relevanssi | Relevanssi – A Better Search (Pro) | unaffected |
|
||||||
| msaari | Relevanssi – A Better Search | unaffected |
|
No data.
No data.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2024-31805 | The Relevanssi – A Better Search plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the relevanssi_update_counts() function in all versions up to, and including, 4.22.1. This makes it possible for unauthenticated attackers to execute expensive queries on the application that could lead into DOS. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Tue, 04 Feb 2025 18:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Relevanssi
Relevanssi relevanssi |
|
| Weaknesses | CWE-862 | |
| CPEs | cpe:2.3:a:relevanssi:relevanssi:*:*:*:*:*:wordpress:*:* | |
| Vendors & Products |
Relevanssi
Relevanssi relevanssi |
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: Wordfence
Published:
Updated: 2024-08-08T19:20:34.318Z
Reserved: 2024-04-02T17:21:51.780Z
Link: CVE-2024-3213
Vulnrichment
Updated: 2024-08-01T20:05:08.375Z
NVD
Status : Analyzed
Published: 2024-04-09T19:15:40.203
Modified: 2025-02-04T17:32:18.910
Link: CVE-2024-3213
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses