Medium severity5.3NVD Advisory· Published Jan 29, 2024· Updated Jun 17, 2026

CVE-2023-7199

Description

The Relevanssi WordPress plugin before 4.22.0, Relevanssi Premium WordPress plugin before 2.25.0 allows any unauthenticated user to read draft and private posts via a crafted request

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Relevanssillm-fuzzy
Range: <4.22.0
Package: https://wordpress.org/plugins/relevanssi
WordPress/Relevanssi Premiumllm-fuzzy2 versions
<2.25.0+ 1 more
- (no CPE)range: <2.25.0
- (no CPE)range: 0
Package: https://wordpress.org/plugins/relevanssi-premium

Patches

Vulnerability mechanics

References

www.relevanssi.com/release-notes/premium-2-25-free-4-22-release-notes/nvdPatch
wpscan.com/vulnerability/0c96a128-4473-41f5-82ce-94bba33ca4a3/nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000