CVE-2024-32710

CVE-2024-32710 describes an unauthenticated SQL Injection in the WP-Recall plugin for WordPress (WP-Recall) up to version 16.26.5, caused by improper neutralization of SQL elements. The description and Red Hat advisory confirm the issue and indicate the affected product/version range is WP-Recall

PT-2024-24726

Name of the Vulnerable Software and Affected Versions Plechev Andrey WP-Recall versions through 16.26.5 Description The issue is related to an Authorization Bypass Through User-Controlled Key. No information is provided about the estimated number of potentially affected devices worldwide or...