Wppost vulnerabilities
We track 2 vulnerabilities in Wppost products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 8, 2025.
2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score
Latest Wppost vulnerabilities
- 9.8 Critical severity
WP-Recall – Registration, Profile, Commerce &…: Improper Neutralization of Special Elements used in an SQL Command
The WP-Recall – Registration, Profile, Commerce & More plugin for WordPress is vulnerable to SQL Injection via the 'databeat' parameter in all versions up to, and including, 16.26.10 due to insufficient escaping on the user supplied parameter and lack of suffi
- 9.8 Critical severity
WP-Recall – Registration, Profile, Commerce &…: Authorization Bypass Through User-Controlled Key
The WP-Recall – Registration, Profile, Commerce & More plugin for WordPress is vulnerable to privilege escalation/account takeover in all versions up to, and including, 16.26.8. This is due to to plugin not properly verifying a user's identity during new order