CVE-2026-59533

CriticalCVSS 9.3

Published: 27/07/2026(UTC)Updated: 27/07/2026(UTC)Translated: 27/07/2026(UTC)NVD NIST

Summary

The Relevanssi Light plugin version 1.2.2 and earlier contains an SQL injection vulnerability exploitable by an unauthenticated attacker.

An attacker could gain unauthorized access to the WordPress database, steal data, or modify it.

Update the Relevanssi Light plugin to the latest available version.

Original NVD description (English source)

Unauthenticated SQL Injection in Relevanssi Light <= 1.2.2 versions.