WP-Recall – Registration, Profile, Commerce & More

Vulnerabilities 18Slug wp-recallLatest version 16.26.14WordPress.org →Closed
N/A Closed
2025-03-03< 16.26.12

WP-Recall – Registration, Profile, Commerce & More <= 16.26.11 - Authenticated (Admin+) SQL Injection

WordfenceCVE
High 7.1 Unfixed Closed
2025-07-04≤ 16.26.14

CVE-2025-52796

CVEEUVDWordfence
Medium 5.3 Unfixed Closed
2025-06-20≤ 16.26.14

CVE-2025-49991

CVEWordfence
Medium 6.3 Unfixed Closed
2025-06-06≤ 16.26.14

CVE-2025-30981

CVEWordfence
High 7.5 Unfixed Closed
2025-05-07≤ 16.26.14

CVE-2025-47653

CVEEUVDWordfence
Low 3.5 Closed
2025-04-28< 16.26.12

WP-Recall <= 16.26.11 - Authenticated (Admin+) Stored Cross-Site Scripting

EUVDWordfenceCVE
Critical 9.8 Closed
2025-03-07< 16.26.12

WP-Recall – Registration, Profile, Commerce & More <= 16.26.10 - Unauthenticated SQL Injection

WordfenceCVE
Medium 6.3 Closed
2025-03-08< 16.26.12

WP-Recall – Registration, Profile, Commerce & More <= 16.26.10 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Exeuction

EUVDWordfenceCVE
Medium 6.4 Closed
2025-03-08< 16.26.12

WP-Recall – Registration, Profile, Commerce & More <= 16.26.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

EUVDWordfenceCVE
Medium 4.3 Closed
2025-03-08< 16.26.12

WordPress WP-Recall Plugin <= 16.26.10 is vulnerable to Broken Access Control

PatchstackEUVDWordfenceCVE
N/A Closed
< 16.24.48

WP-Recall &lt; 16.24.48 - Reflected Cross-Site Scripting

WPScan
N/A Closed
2021-10-05< 16.24.48

WP-Recall <= 16.24.47 - Reflected Cross-Site Scripting

Wordfence