cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score
CVE-2024-8292,https://securityvulnerability.io/vulnerability/CVE-2024-8292,Privilege Escalation Vulnerability in WP-Recall Plugin Could Lead to Account Takeover,The WP-Recall plugin for WordPress possesses a vulnerability that allows unauthenticated attackers to exploit a flaw in user identity verification during the creation of a new order. This issue affects all versions up to and including 16.26.8 and is contingent upon the commerce addon being enabled. Attackers have the potential to input any email address into the user_email field and subsequently update the password associated with that account. This security loophole poses a significant risk as it effectively grants unauthorized access to user accounts without the need for prior authentication.,Wordpress,"WP-recall – Registration, Profile, Commerce & More",9.8,CRITICAL,0.0006300000241026282,false,,false,false,false,,false,false,2024-09-06T06:50:52.522Z,0
CVE-2024-1175,https://securityvulnerability.io/vulnerability/CVE-2024-1175,Unauthorized Payment Data Deletion Vulnerability in WP-Recall Plugin,"The WP-Recall – Registration, Profile, Commerce & More plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'delete_payment' function in all versions up to, and including, 16.26.6. This makes it possible for unauthenticated attackers to delete arbitrary payments.",Wordpress,"WP-recall – Registration, Profile, Commerce & More",5.3,MEDIUM,0.0004600000102072954,false,,false,false,false,,false,false,2024-06-06T03:53:09.201Z,0