Lucene search
ZERO APTITUDEPATCHSTACK:6239FA4F9DA0578FCCEE913E4B54655BHistoryAug 31, 2020 - 12:00 a.m.
WordPress Recall Products plugin <= 0.8 - Authenticated SQL Injection (SQLi) vulnerability
2020-08-3100:00:00
ZERO APTITUDE
patchstack.com
7
0.001 Low
EPSS
Percentile
44.1%
Authenticated SQL Injection (SQLi) vulnerability found by ZERO APTITUDE in WordPress Recall Products plugin (versions <= 0.8).
Solution
2020-09-16 - we were unable to find a patched version of this plugin.
WordPress.org notification: “This plugin has been closed as of July 28, 2020 and is not available for download. Reason: Security Issue.”
| CPE | Name | Operator | Version |
|---|---|---|---|
| recall products | le | 0.8 |
Related
cve
cve
CVE-2020-25379
2020-09-14 16:15:11
prion
prion
Design/Logic Flaw
2020-09-14 16:15:00
wpvulndb
wpvulndb
Recall Products <= 0.8 - Authenticated SQL Injection
2020-08-31 00:00:00
cvelist
cvelist
CVE-2020-25379
2020-09-14 15:29:10
nvd
nvd
CVE-2020-25379
2020-09-14 16:15:11
wpexploit
wpexploit
Recall Products <= 0.8 - Authenticated SQL Injection
2020-08-31 00:00:00