9.3
Critical
CVE-2024-32709 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Plechev Andrey…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Plechev Andrey WP-Recall.This issue affects WP-Recall: from n/a through 16.26.5.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP-Recall 16.26 | earliest → 16.26.5 | No fix stated |
References
- patchstack.com patchstack.com
Timeline
- Published
- Last modified
Other CVEs of WP-Recall
The 4 CVEs of WP-Recall →
CVE-2024-35657
Cross-Site Request Forgery (CSRF) vulnerability in Plechev Andrey WP-Recall.This issue affects WP-Recall: from n/a…
5.4
Medium
CVE-2024-32710
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Plechev Andrey…
8.5
High
CVE-2024-32604
Authorization Bypass Through User-Controlled Key vulnerability in Plechev Andrey WP-Recall.This issue affects WP-Recall:…
4.3
Medium