wppost

Products

ProductCVEsExploitedLatest
WP-Recall – Registration, Profile, Commerce & More6–Mar 8, 2025

Exploited and recent CVEs

  • CVE-2025-1322 Medium 4.3 WP-Recall – Registration, Profile, Commerce & More <= 16.26.10 - Authenticated (Contributor+) Protected Post Disclosure 0.5%
  • CVE-2025-1323 High 7.5 WP-Recall – Registration, Profile, Commerce & More <= 16.26.10 - Unauthenticated SQL Injection 2.9%
  • CVE-2025-1325 Medium 6.3 WP-Recall – Registration, Profile, Commerce & More <= 16.26.10 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Exeuction 0.3%
  • CVE-2025-1324 Medium 6.4 WP-Recall – Registration, Profile, Commerce & More <= 16.26.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.3%
  • CVE-2024-8292 Critical 9.8 WP-Recall – Registration, Profile, Commerce & More <= 16.26.8 - Insecure Direct Object Reference to Unauthenticated Arbitrary Password Update 0.6%
  • CVE-2024-1175 Medium 5.3 WP-Recall – Registration, Profile, Commerce & More <= 16.26.6 - Unauthenticated Payment Deletion via delete_payment 0.4%