WP-Recall – Registration, Profile, Commerce & More, CVE-2024-1175

CVE, Research URL: CVE-2024-1175
Home page URL: Security reports for WP-Recall – Registration, Profile, Commerce & More
Application: WP-Recall – Registration, Profile, Commerce & More
Published on: Jun 06, 2024
Research Description: The WP-Recall – Registration, Profile, Commerce & More plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'delete_payment' function in all versions up to, and including, 16.26.6. This makes it possible for unauthenticated attackers to delete arbitrary payments.
Affected versions: Min -, max 16.26.6.
Status: vulnerable

WP-Recall &#8211; Registration, Profile, Commerce &amp; More, CVE-2024-1175