High severity8.8NVD Advisory· Published Sep 14, 2020· Updated Jun 17, 2026
CVE-2020-25379
CVE-2020-25379
Description
Wordpress Plugin Store / Mike Rooijackers Recall Products V0.8 fails to sanitize input from the 'Manufacturer[]' parameter which allows an authenticated attacker to inject a malicious SQL query.
Affected products
2- Mike Rooijackers/Recall Productsdescription
- Range: <0.8
Patches
Vulnerability mechanics
References
1- zeroaptitude.com/misha/wordpress-plugin-bug-hunting-part-2/nvdExploitThird Party AdvisoryURL Repurposed
News mentions
0No linked articles in our index yet.