Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
quantumrose records in CISA KEVNo quantumrose vulnerabilities are listed in CISA KEV.
Priority MEDIUM 48
The WPRecovery plugin for WordPress is vulnerable to SQL Injection via the 'data[id]' parameter in all versions up to, and including, 2.0.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00424 · Published 2025-10-03 · No fix listed CWE-89
Open these records in search →