CVE-2024-7630: Relevanssi <= 4.22.2 (Free) and <= 2.25.1 (Premium) - Unauthenticated Information Exposure
The Relevanssi – A Better Search plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 4.22.2 (Free) and 2.25.1 (Premium) via the relevanssidoquery() due to insufficient limitations on the posts that are returned when searching. This makes it possible for unauthenticated attackers to extract potentially sensitive information from password protected posts.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-7630?
CVE-2024-7630 is considered a moderate severity vulnerability due to the risk of information exposure.
How do I fix CVE-2024-7630?
To fix CVE-2024-7630, update the Relevanssi plugin to version 4.23.0 or later.
Who is affected by CVE-2024-7630?
CVE-2024-7630 affects all versions of the Relevanssi plugin up to and including 4.22.2.
What type of vulnerability is CVE-2024-7630?
CVE-2024-7630 is an information exposure vulnerability that allows unauthorized access to search results.
What is the impact of CVE-2024-7630?
The impact of CVE-2024-7630 includes potential unauthorized users being able to access sensitive post information.