Skip to main contentSkip to footer

The 3.3.8 update for free Relevanssi matches Relevanssi Premium 1.13.2 and is a maintenance release and generally recommended, as it fixes minor bugs and a possible XSS vulnerability.

The XSS vulnerability is related to stopwords: the list of stopwords is printed out unescaped on the Relevanssi settings page in WP admin dashboard. There’s some potential for a XSS vulnerability there, but in order to attack this way, the attacker needs to have admin rights to your WP site in the first place. 1.13.2 fixes the vulnerability in any case.