Skip to contentPlechevandrey Wp-recall vulnerabilities
- plechevandrey wp-recallWP-Recall < 16.26.12 - Admin+ Stored XSSCVE-2024-97713.5 Low
- plechevandrey wp-recallWP-Recall < 16.26.12 - Admin+ SQL InjectionCVE-2024-97704.7 Medium
- plechevandrey wp-recall, wppost wp-recall – registration, profile, commerce & more +1 moreWP-Recall – Registration, Profile, Commerce & More <= 16.26.10 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode ExeuctionCVE-2025-13256.3 Medium
- plechevandrey wp-recall, wppost wp-recall – registration, profile, commerce & more +1 moreWP-Recall – Registration, Profile, Commerce & More <= 16.26.10 - Unauthenticated SQL InjectionCVE-2025-1323Public exploit7.5 High
- plechevandrey wp-recall, wppost wp-recall – registration, profile, commerce & more +1 moreWP-Recall – Registration, Profile, Commerce & More <= 16.26.10 - Authenticated (Contributor+) Protected Post DisclosureCVE-2025-13224.3 Medium
- plechevandrey wp-recall, wppost wp-recall – registration, profile, commerce & more +1 moreWP-Recall – Registration, Profile, Commerce & More <= 16.26.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2025-13246.4 Medium
- plechevandrey wp-recall, wppost wp-recall – registration, profile, commerce & more +1 moreWP-Recall – Registration, Profile, Commerce & More <= 16.26.8 - Insecure Direct Object Reference to Unauthenticated Arbitrary Password UpdateCVE-2024-82929.8 Critical
- plechevandrey wp-recall, wppost wp-recall – registration, profile, commerce & more +1 moreWP-Recall – Registration, Profile, Commerce & More <= 16.26.6 - Unauthenticated Payment Deletion via delete_paymentCVE-2024-11755.3 Medium