Wppost Wp-recall vulnerabilities

• plechevandrey wp-recall, wppost wp-recall – registration, profile, commerce & more +1 more WP-Recall – Registration, Profile, Commerce & More <= 16.26.10 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Exeuction CVE-2025-1325 6.3 MediumMarch 8, 2025
• plechevandrey wp-recall, wppost wp-recall – registration, profile, commerce & more +1 more WP-Recall – Registration, Profile, Commerce & More <= 16.26.10 - Unauthenticated SQL Injection CVE-2025-1323 Public exploit 7.5 HighMarch 8, 2025
• plechevandrey wp-recall, wppost wp-recall – registration, profile, commerce & more +1 more WP-Recall – Registration, Profile, Commerce & More <= 16.26.10 - Authenticated (Contributor+) Protected Post Disclosure CVE-2025-1322 4.3 MediumMarch 8, 2025
• plechevandrey wp-recall, wppost wp-recall – registration, profile, commerce & more +1 more WP-Recall – Registration, Profile, Commerce & More <= 16.26.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2025-1324 6.4 MediumMarch 8, 2025
• plechevandrey wp-recall, wppost wp-recall – registration, profile, commerce & more +1 more WP-Recall – Registration, Profile, Commerce & More <= 16.26.8 - Insecure Direct Object Reference to Unauthenticated Arbitrary Password Update CVE-2024-8292 9.8 CriticalSeptember 6, 2024
• plechevandrey wp-recall, wppost wp-recall – registration, profile, commerce & more +1 more WP-Recall – Registration, Profile, Commerce & More <= 16.26.6 - Unauthenticated Payment Deletion via delete_payment CVE-2024-1175 5.3 MediumJune 6, 2024