VendorsPlechev Andreywp-recallall versions
Vulnerabilities

Plechev Andrey WP-Recall

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

8CVEs
CVE-2025-1323
WP-Recall – Registration, Profile, Commerce & More <= 16.26.10 - Unauthenticated SQL Injection
Published 2025-03-08 · Analyzed
9.8EPSS 0.029
CVE-2024-8292
WP-Recall – Registration, Profile, Commerce & More <= 16.26.8 - Insecure Direct Object Reference to Unauthenticated Arbitrary Password Update
Published 2024-09-06 · Analyzed
9.8EPSS 0.006
CVE-2025-1324
WP-Recall – Registration, Profile, Commerce & More <= 16.26.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Published 2025-03-08 · Analyzed
6.4EPSS 0.002
CVE-2025-1325
WP-Recall – Registration, Profile, Commerce & More <= 16.26.10 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Exeuction
Published 2025-03-08 · Analyzed
6.3EPSS 0.003
CVE-2024-1175
WP-Recall – Registration, Profile, Commerce & More <= 16.26.6 - Unauthenticated Payment Deletion via delete_payment
Published 2024-06-06 · Modified
5.3EPSS 0.004
CVE-2024-9770
WP-Recall < 16.26.12 - Admin+ SQL Injection
Published 2025-03-25 · Analyzed
4.7EPSS 0.003
CVE-2025-1322
WP-Recall – Registration, Profile, Commerce & More <= 16.26.10 - Authenticated (Contributor+) Protected Post Disclosure
Published 2025-03-08 · Analyzed
4.3EPSS 0.005
CVE-2024-9771
WP-Recall < 16.26.12 - Admin+ Stored XSS
Published 2025-04-28 · Analyzed
3.5EPSS 0.003