CVE-2025-1325

Mô tả

Tham khảo

• plugins.trac.wordpress.org/changeset/3250094/wp-recall/trunk/add-on/publicpost/functions-ajax.php · Patch
• wordfence.com/threat-intel/vulnerabilities/id/ad3b9040-05ed-452d-9b3f-26d1a93c62ba · Third Party Advisory

Lỗ hổng khác của wp-recall

• CVE-2024-9771THẤP 3.5The WP-Recall WordPress plugin before 16.26.12 does not sanitise and escape some of its settings, which could allow high privilege users su…
• CVE-2024-9770TRUNG BÌNH 4.7The WP-Recall WordPress plugin before 16.26.12 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins…
• CVE-2025-1324TRUNG BÌNH 5.4The WP-Recall – Registration, Profile, Commerce & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'p…
• CVE-2025-1323NGHIÊM TRỌNG 9.8The WP-Recall – Registration, Profile, Commerce & More plugin for WordPress is vulnerable to SQL Injection via the 'databeat' parameter in a…
• CVE-2025-1322TRUNG BÌNH 4.3The WP-Recall – Registration, Profile, Commerce & More plugin for WordPress is vulnerable to Information Exposure in all versions up to, and…