CVE-2024-1380: Relevanssi WordPress plugin missing authorization exposes query log export

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 20 September 2026. Confidence: high.

medium priorityUnauthenticated data exposure is easy to reach, but the CVSS score is 5.3 and the impact is limited to confidentiality of query log data.

What it is

The Relevanssi search plugin for WordPress lacks a capability check on the relevanssi_export_log_check() function in all versions up to and including 4.22.0 (Free) and 2.25.0 (Premium). This allows unauthenticated attackers to export the plugin's query log data. The vendor considers the issue theoretically patched as-is and may add a capability check later.

Impact

An attacker can retrieve the plugin's stored search query log, which may reveal user search terms and related site activity. The exposure is limited to confidentiality of that log data; no integrity or availability impact is described.

Attack surface

Reachable over the network with no authentication and no user interaction, per the CVSS vector AV:N/AC:L/PR:N/UI:N. Any site running an affected Relevanssi version exposes the export endpoint to anonymous requests.

Exploitation

Not listed in CISA KEV and no ransomware usage is documented. EPSS is high at 0.50192 (98.851 percentile), and references include only Patch and Third Party Advisory tags, so no public exploit code is confirmed by the record.

What to do

• Update Relevanssi to a version newer than 4.22.0 (Free) or 2.25.0 (Premium) if the vendor has released one; the record only confirms a changeset, so verify the fixed version before relying on it.
• If no fixed version is available, restrict access to the plugin's export functionality at the web server or WAF level.
• Review WordPress roles and capabilities to ensure only trusted administrators can reach plugin admin endpoints.
• Monitor vendor advisories for a formal capability-check fix, since the vendor indicated the issue is only theoretically patched.

Detection

• Search web server and WordPress access logs for requests to Relevanssi export endpoints, especially from unauthenticated or unexpected source IPs.
• Alert on repeated or automated access to plugin export URLs that return log data.
• Audit installed Relevanssi versions across the WordPress estate to identify any at or below 4.22.0 (Free) or 2.25.0 (Premium).

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.