LetsRecover vulnerabilities
We track 1 vulnerability in LetsRecover products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 13, 2026.
1vulnerabilities
0critical
1high
0exploited
8.6average CVSS score
Latest LetsRecover vulnerabilities
- 8.6 High severity
LetsRecover: Improper Neutralization of Special Elements used in an SQL Command
The LetsRecover WordPress plugin through 1.2.0 does not sanitize a user-supplied value that is used as a database column name in one of its unauthenticated AJAX actions, allowing unauthenticated attackers to append SQL to the query and read arbitrary data from