WP-Recall vulnerabilities

2 known vulnerabilities in WP-Recall from Tggfref. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  WP-Recall: Improper Neutralization of Input During Web Page Generation

  CVE-2025-52796Jul 4, 2025Tggfref

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tggfref WP-Recall allows Reflected XSS. This issue affects WP-Recall: from n/a through 16.26.14.

• 7.5 High severity

  WP-Recall: Improper Control of Filename for Include/Require Statement in PHP Program

  CVE-2025-47653May 7, 2025Tggfref

  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in tggfref WP-Recall allows PHP Local File Inclusion. This issue affects WP-Recall: from n/a through 16.26.14.