WP-Recall – Registration, Profile, Commerce & More vulnerabilities

2 known vulnerabilities in WP-Recall – Registration, Profile, Commerce & More from Wppost. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  WP-Recall – Registration, Profile, Commerce &…: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-1323Mar 8, 2025WppostEPSS 2.94%

  The WP-Recall – Registration, Profile, Commerce & More plugin for WordPress is vulnerable to SQL Injection via the 'databeat' parameter in all versions up to, and including, 16.26.10 due to insufficient escaping on the user supplied parameter and lack of suffi

• 9.8 Critical severity

  WP-Recall – Registration, Profile, Commerce &…: Authorization Bypass Through User-Controlled Key

  CVE-2024-8292Sep 6, 2024Wppost

  The WP-Recall – Registration, Profile, Commerce & More plugin for WordPress is vulnerable to privilege escalation/account takeover in all versions up to, and including, 16.26.8. This is due to to plugin not properly verifying a user's identity during new order