CVE-2026-59533: Unauthenticated SQL Injection in Relevanssi Light Plugin
A critical vulnerability (CVE-2026-59533, CVSS 9.3) was discovered in the Relevanssi Light plugin (versions <= 1.2.2) for WordPress, allowing unauthenticated SQL injection. This vulnerability is not currently being exploited, but it poses a significant risk to WordPress sites using the affected plugin versions. Immediate action is required to update to a patched version.