Plugin inspection:

Relevanssi Premium

Use with caution

Last revised:

Confidence: Medium
This plugin has been given a short, targeted code review.

Before using this plugin, you should carefully consider these findings. Read more about this recommendation.

Findings

This plugin is fundamentally well-written, but contains a very large number of unprepared SQL statements. In all other respects it scored well. This recommendation is therefore marginal.

Reason for the 'Use with caution' result

The plugin contains or is likely to contain a vulnerability which could be exploited by a privileged user to affect the site’s confidentiality, integrity or availability in a manner exceeding their privileges:

Within the limits of an inspection, it was not possible to demonstrate that none of the unprepared SQL statements in this plugin is vulnerable and the large number of potentially vulnerable statements is an issue of concern.

Ideally, this plugin should be more thoroughly reviewed so that its SQL statements can be examined in more detail.

Failure criteria

  • Execution of unprepared SQL statements

Read more about our failure criteria.