CVE-2026-15941

Name of the Vulnerable Software and Affected Versions Relevanssi (affected versions not specified)

Description The plugin includes an Admin Search page that enables users with the edit posts capability to perform searches from the WordPress dashboard. An AJAX handler accepts a URL-encoded args parameter, which is parsed into a WP Query and passed to the taxonomy restriction builder. Because the taxonomy value is sanitized as text but not parameterized for SQL before being interpolated into a term taxonomy lookup query, an authenticated attacker with contributor-level privileges can perform time-based blind SQL injection against the database.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.