What’s Vulnerable › Products
wppost WP-Recall – Registration, Profile, Commerce & More vulnerabilities
8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.
Check whether your wppost WP-Recall – Registration, Profile, Commerce & More version is affected
Latest wppost WP-Recall – Registration, Profile, Commerce & More vulnerabilities
- CVE-2024-9771 — WP-Recall < 16.26.12 - Admin+ Stored XSS (CVSS 3.5)
- CVE-2024-9770 — WP-Recall < 16.26.12 - Admin+ SQL Injection (CVSS 4.7)
- CVE-2025-1325 — WP-Recall – Registration, Profile, Commerce & More <= 16.26.10 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Exeuction (CVSS 6.3)
- CVE-2025-1324 — WP-Recall – Registration, Profile, Commerce & More <= 16.26.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 5.4)
- CVE-2025-1323 — WP-Recall – Registration, Profile, Commerce & More <= 16.26.10 - Unauthenticated SQL Injection (CVSS 9.8)
- CVE-2025-1322 — WP-Recall – Registration, Profile, Commerce & More <= 16.26.10 - Authenticated (Contributor+) Protected Post Disclosure (CVSS 4.3)
- CVE-2024-8292 — WP-Recall – Registration, Profile, Commerce & More <= 16.26.8 - Insecure Direct Object Reference to Unauthenticated Arbitrary Password Update (CVSS 9.8)
- CVE-2024-1175 — WP-Recall – Registration, Profile, Commerce & More <= 16.26.6 - Unauthenticated Payment Deletion via delete_payment (CVSS 5.3)