Cpe:2.3:a:christoph_vielgrader:relevanssi:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3achristoph_vielgraderrelevanssi/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioSat, 24 Oct 2026 16:16:25 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgChristoph Vielgrader Relevanssi: Object injection via insecure deserialization (CVE-2026-114704)https://feed.craftedsignal.io/briefs/2026-10-relevanssi-deserialization/Sat, 24 Oct 2026 16:16:25 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-relevanssi-deserialization/The Relevanssi WordPress plugin is vulnerable to object injection due to deserialization of untrusted data.The Relevanssi plugin for WordPress, maintained by Christoph Vielgrader, contains a deserialization of untrusted data vulnerability (CVE-2026-114704). This vulnerability allows for object injection. The issue affects Relevanssi versions from n/a through 4.28.4.

Impact

The vulnerability carries a CVSS v3.1 base score of 7.2.

]]>highadvisory