Vulnerabilities

TI-2020-15537 CVE-2020-25380 · GHSA-g82p-qfjv-w56j

Wordpress Plugin Store / Mike Rooijackers Recall Products V0.8 is affected by: Cross Site…

LOW 26

Wordpress Plugin Store / Mike Rooijackers Recall Products V0.8 is affected by: Cross Site Scripting (XSS) via the 'Recall Settings' field in admin.php.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00723 Published 2020-09-14 No fix listed CWE-79

TI-2020-15536 CVE-2020-25379 · GHSA-2jc5-w7hj-r4r8

Wordpress Plugin Store / Mike Rooijackers Recall Products V0.8 fails to sanitize input…

MEDIUM 42

Wordpress Plugin Store / Mike Rooijackers Recall Products V0.8 fails to sanitize input from the 'Manufacturer[]' parameter which allows an authenticated attacker to inject a malicious SQL query.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01928 Published 2020-09-14 No fix listed CWE-89

Vulnerabilities

Filters

Wordpress Plugin Store / Mike Rooijackers Recall Products V0.8 is affected by: Cross Site…

Wordpress Plugin Store / Mike Rooijackers Recall Products V0.8 fails to sanitize input…