CVE-2026-114704

CVE-2026-114704 · WordPress Relevanssi plugin <= 4.28.4 - PHP Object Injection vulnerability

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Deserialization of Untrusted Data vulnerability in Christoph Vielgrader Relevanssi relevanssi allows Object Injection.This issue affects Relevanssi : from n/a through 4.28.4.

CVSS 7.2 · High · EPSS 0.4% · Fix available

Published: 2026-10-24T14:00:09.045Z
Updated: 2026-10-24T14:46:58.175Z

Affected products and versions

relevanssi
Versions
- ≥ 0, ≤ 4.28.4: Affected; ≥ 4.28.5: Not affected (custom)
Update to 4.28.5

Original sources

https://patchstack.com/database/wordpress/plugin/relevanssi/vulnerability/wordpress-relevanssi-plugin-4-28-4-php-object-injection-vulnerability?_s_id=cve
https://nvd.nist.gov/vuln/detail/CVE-2026-114704

Check your server →