CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-9770

The WP-Recall WordPress plugin before 16.26.12 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 5.7%

CVSS Severity

CVSS v3 Score 4.7

References

https://wpscan.com/vulnerability/d31f8713-b807-4ac4-8897-7d62a93bb2db/

Products affected by CVE-2024-9770

Plechevandrey » Wp-Recall » Version: N/A

cpe:2.3:a:plechevandrey:wp-recall:-
Plechevandrey » Wp-Recall » Version: 16.22.10

cpe:2.3:a:plechevandrey:wp-recall:16.22.10
Plechevandrey » Wp-Recall » Version: 16.23.16

cpe:2.3:a:plechevandrey:wp-recall:16.23.16
Plechevandrey » Wp-Recall » Version: 16.23.20

cpe:2.3:a:plechevandrey:wp-recall:16.23.20
Plechevandrey » Wp-Recall » Version: 16.24.48

cpe:2.3:a:plechevandrey:wp-recall:16.24.48
Plechevandrey » Wp-Recall » Version: 16.25.19

cpe:2.3:a:plechevandrey:wp-recall:16.25.19
Plechevandrey » Wp-Recall » Version: 16.26.5

cpe:2.3:a:plechevandrey:wp-recall:16.26.5
Plechevandrey » Wp-Recall » Version: 16.26.6

cpe:2.3:a:plechevandrey:wp-recall:16.26.6
Plechevandrey » Wp-Recall » Version: 16.26.7

cpe:2.3:a:plechevandrey:wp-recall:16.26.7

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-9770

Products

Pricing

Contact Us