Plechevandrey vulnerabilities

Products

• Wp-recall 8

Newest

• plechevandrey wp-recall WP-Recall < 16.26.12 - Admin+ Stored XSS CVE-2024-9771 3.5 LowApril 28, 2025
• plechevandrey wp-recall WP-Recall < 16.26.12 - Admin+ SQL Injection CVE-2024-9770 4.7 MediumMarch 25, 2025
• plechevandrey wp-recall, wppost wp-recall – registration, profile, commerce & more +1 more WP-Recall – Registration, Profile, Commerce & More <= 16.26.10 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Exeuction CVE-2025-1325 6.3 MediumMarch 8, 2025
• plechevandrey wp-recall, wppost wp-recall – registration, profile, commerce & more +1 more WP-Recall – Registration, Profile, Commerce & More <= 16.26.10 - Unauthenticated SQL Injection CVE-2025-1323 Public exploit 7.5 HighMarch 8, 2025
• plechevandrey wp-recall, wppost wp-recall – registration, profile, commerce & more +1 more WP-Recall – Registration, Profile, Commerce & More <= 16.26.10 - Authenticated (Contributor+) Protected Post Disclosure CVE-2025-1322 4.3 MediumMarch 8, 2025
• plechevandrey wp-recall, wppost wp-recall – registration, profile, commerce & more +1 more WP-Recall – Registration, Profile, Commerce & More <= 16.26.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2025-1324 6.4 MediumMarch 8, 2025
• plechevandrey wp-recall, wppost wp-recall – registration, profile, commerce & more +1 more WP-Recall – Registration, Profile, Commerce & More <= 16.26.8 - Insecure Direct Object Reference to Unauthenticated Arbitrary Password Update CVE-2024-8292 9.8 CriticalSeptember 6, 2024
• plechevandrey wp-recall, wppost wp-recall – registration, profile, commerce & more +1 more WP-Recall – Registration, Profile, Commerce & More <= 16.26.6 - Unauthenticated Payment Deletion via delete_payment CVE-2024-1175 5.3 MediumJune 6, 2024