Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1310 CNY

100%
Buy Us a Coffee

WP-Recall – Registration, Profile, Commerce & More — Vulnerabilities & Security Advisories 6

All 6 CVE vulnerabilities found in WP-Recall – Registration, Profile, Commerce & More, with AI-generated Chinese analysis, references, and POCs.

Vendor: wppost

CVE IDTitleCVSSSeverityPublished
CVE-2025-1323 WP-Recall – Registration, Profile, Commerce & More <= 16.26.10 - Unauthenticated SQL Injection CWE-89 7.5 High2025-03-08
CVE-2025-1322 WP-Recall – Registration, Profile, Commerce & More <= 16.26.10 - Authenticated (Contributor+) Protected Post Disclosure CWE-200 4.3 Medium2025-03-08
CVE-2025-1325 WP-Recall – Registration, Profile, Commerce & More <= 16.26.10 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Exeuction CWE-862 6.3 Medium2025-03-08
CVE-2025-1324 WP-Recall – Registration, Profile, Commerce & More <= 16.26.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CWE-79 6.4 Medium2025-03-08
CVE-2024-8292 WP-Recall – Registration, Profile, Commerce & More <= 16.26.8 - Insecure Direct Object Reference to Unauthenticated Arbitrary Password Update CWE-639 9.8 Critical2024-09-06
CVE-2024-1175 WP-Recall – Registration, Profile, Commerce & More <= 16.26.6 - Unauthenticated Payment Deletion via delete_payment CWE-862 5.3 Medium2024-06-06

All 6 known CVE vulnerabilities affecting WP-Recall – Registration, Profile, Commerce & More with full Chinese analysis, references, and POCs where available.