CVE-2025-14719 - Vulnerability Details - OpenCVE

The Relevanssi WordPress plugin before 4.26.0, Relevanssi Premium WordPress plugin before 2.29.0 do not sanitize and escape a parameter before using it in a SQL statement, allowing contributor and above roles to perform SQL injection attacks

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00021.

Exploitation poc

Automatable no

Technical Impact partial

No data.

No data.

No data.

No data.

References

Link	Providers
https://wpscan.com/vulnerability/bd8e27c7-8f97-4313-b16e-50ac6f0676f5/

History

Wed, 07 Jan 2026 17:15:00 +0000

Type	Values Removed	Values Added
Metrics		cvssV3_1 `{'score': 4.9, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Wed, 07 Jan 2026 06:15:00 +0000

Type	Values Removed	Values Added
Description		The Relevanssi WordPress plugin before 4.26.0, Relevanssi Premium WordPress plugin before 2.29.0 do not sanitize and escape a parameter before using it in a SQL statement, allowing contributor and above roles to perform SQL injection attacks
Title		Relevanssi (Free < 4.26.0, Premium < 2.29.0) - Contributor+ SQLi
References		https://wpscan.com/vulnerability/bd8e27c7-8f97-4313-b16e-50ac6f0676f5/

MITRE

Status: PUBLISHED

Assigner: WPScan

Published: 2026-01-07T06:00:09.066Z

Updated: 2026-01-07T16:12:07.677Z

Reserved: 2025-12-15T13:56:37.853Z

Link: CVE-2025-14719

Vulnrichment

Updated: 2026-01-07T16:11:41.944Z

NVD

Status : Received

Published: 2026-01-07T12:16:56.083

Modified: 2026-01-07T17:15:56.763

Link: CVE-2025-14719

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-14719", "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "state": "PUBLISHED", "assignerShortName": "WPScan", "dateReserved": "2025-12-15T13:56:37.853Z", "datePublished": "2026-01-07T06:00:09.066Z", "dateUpdated": "2026-01-07T16:12:07.677Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "shortName": "WPScan", "dateUpdated": "2026-01-07T06:00:09.066Z"}, "title": "Relevanssi (Free < 4.26.0, Premium < 2.29.0) - Contributor+ SQLi", "problemTypes": [{"descriptions": [{"description": "CWE-89 SQL Injection", "lang": "en", "type": "CWE"}]}], "affected": [{"vendor": "Unknown", "product": "Relevanssi", "versions": [{"status": "affected", "versionType": "semver", "version": "0", "lessThan": "4.26.0"}], "defaultStatus": "unaffected"}, {"vendor": "Unknown", "product": "Relevanssi Premium", "versions": [{"status": "affected", "versionType": "semver", "version": "0", "lessThan": "2.29.0"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The Relevanssi WordPress plugin before 4.26.0, Relevanssi Premium WordPress plugin before 2.29.0 do not sanitize and escape a parameter before using it in a SQL statement, allowing contributor and above roles to perform SQL injection attacks"}], "references": [{"url": "https://wpscan.com/vulnerability/bd8e27c7-8f97-4313-b16e-50ac6f0676f5/", "tags": ["exploit", "vdb-entry", "technical-description"]}], "credits": [{"lang": "en", "value": "Drew Webber (mcdruid)", "type": "finder"}, {"lang": "en", "value": "WPScan", "type": "coordinator"}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "WPScan CVE Generator"}}, "adp": [{"references": [{"url": "https://wpscan.com/vulnerability/bd8e27c7-8f97-4313-b16e-50ac6f0676f5/", "tags": ["exploit"]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-01-07T16:11:58.365960Z", "id": "CVE-2025-14719", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-07T16:12:07.677Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2025-14719", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-01-07T16:11:58.365960Z"}}}], "references": [{"url": "https://wpscan.com/vulnerability/bd8e27c7-8f97-4313-b16e-50ac6f0676f5/", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-07T16:11:41.944Z"}}], "cna": {"title": "Relevanssi (Free < 4.26.0, Premium < 2.29.0) - Contributor+ SQLi", "source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "Drew Webber (mcdruid)"}, {"lang": "en", "type": "coordinator", "value": "WPScan"}], "affected": [{"vendor": "Unknown", "product": "Relevanssi", "versions": [{"status": "affected", "version": "0", "lessThan": "4.26.0", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Unknown", "product": "Relevanssi Premium", "versions": [{"status": "affected", "version": "0", "lessThan": "2.29.0", "versionType": "semver"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://wpscan.com/vulnerability/bd8e27c7-8f97-4313-b16e-50ac6f0676f5/", "tags": ["exploit", "vdb-entry", "technical-description"]}], "x_generator": {"engine": "WPScan CVE Generator"}, "descriptions": [{"lang": "en", "value": "The Relevanssi WordPress plugin before 4.26.0, Relevanssi Premium WordPress plugin before 2.29.0 do not sanitize and escape a parameter before using it in a SQL statement, allowing contributor and above roles to perform SQL injection attacks"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "description": "CWE-89 SQL Injection"}]}], "providerMetadata": {"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "shortName": "WPScan", "dateUpdated": "2026-01-07T06:00:09.066Z"}}}, "cveMetadata": {"cveId": "CVE-2025-14719", "state": "PUBLISHED", "dateUpdated": "2026-01-07T16:12:07.677Z", "dateReserved": "2025-12-15T13:56:37.853Z", "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "datePublished": "2026-01-07T06:00:09.066Z", "assignerShortName": "WPScan"}, "dataVersion": "5.2"}