Medium
CVE-2025-52796
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 17
Reset filters
Medium
CVE-2025-49991
WP-Recall <= 16.26.14 - Missing Authorization
Medium
CVE-2025-30981
WP-Recall <= 16.26.14 - Cross-Site Request Forgery
High
CVE-2025-47653
WP-Recall <= 16.26.14 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-9771
WP-Recall <= 16.26.11 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2025-1323
WP-Recall – Registration, Profile, Commerce & More <= 16.26.10 - Unauthenticated SQL Injection
Medium
CVE-2025-1325
WP-Recall – Registration, Profile, Commerce & More <= 16.26.10 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Exeuction
Medium
CVE-2025-1322
WP-Recall – Registration, Profile, Commerce & More <= 16.26.10 - Authenticated (Contributor+) Protected Post Disclosure
Medium
CVE-2025-1324
WP-Recall – Registration, Profile, Commerce & More <= 16.26.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-9770
WP-Recall – Registration, Profile, Commerce & More <= 16.26.11 - Authenticated (Admin+) SQL Injection
Critical
CVE-2024-8292
WP-Recall – Registration, Profile, Commerce & More <= 16.26.8 - Insecure Direct Object Reference to Unauthenticated Arbitrary Password Update
Medium
CVE-2024-1175
WP-Recall – Registration, Profile, Commerce & More <= 16.26.6 - Unauthenticated Payment Deletion via delete_payment
Medium
CVE-2024-35657
WP-Recall <= 16.26.6 - Cross-Site Request Forgery
Critical
CVE-2024-32710
WP-Recall – Registration, Profile, Commerce & More <= 16.26.5 - Authenticated (Contributor+) SQL Injection
Critical
CVE-2024-32709
WP-Recall – Registration, Profile, Commerce & More <= 16.26.5 - Unauthenticated SQL Injection
Medium
CVE-2024-32604
WP-Recall – Registration, Profile, Commerce & More <= 16.26.5 - Insecure Direct Object Reference
Medium
ccd2ef23-23b7-4a32-aeda-41ea9439f166
WP-Recall <= 16.24.47 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.