CVE-2024-1175

概要

参考情報

• plugins.trac.wordpress.org/changeset
• wordpress.org/plugins/wp-recall · Product
• wordfence.com/threat-intel/vulnerabilities/id/6b84b13a-b46c-48fc-a7a8-de32c575d576 · Third Party Advisory

wp-recall のその他の脆弱性

• CVE-2024-9771低 3.5The WP-Recall WordPress plugin before 16.26.12 does not sanitise and escape some of its settings, which could allow high privilege users su…
• CVE-2024-9770中 4.7The WP-Recall WordPress plugin before 16.26.12 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins…
• CVE-2025-1325中 6.3The WP-Recall – Registration, Profile, Commerce & More plugin for WordPress is vulnerable to arbitrary shortcode execution due to a missing …
• CVE-2025-1324中 5.4The WP-Recall – Registration, Profile, Commerce & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'p…
• CVE-2025-1323緊急 9.8The WP-Recall – Registration, Profile, Commerce & More plugin for WordPress is vulnerable to SQL Injection via the 'databeat' parameter in a…