Letsrecover (Unknown) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2023-01-02. Vendor: Unknown.

CVEs of Letsrecover

• CVE-2022-4357 - CVSS 9.8 (critical), 2023-01-02: The LetsRecover WordPress plugin before 1.2.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action…
• CVE-2022-4356 - CVSS 7.2 (high), 2023-01-02: The LetsRecover WordPress plugin before 1.2.0 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection…
• CVE-2022-4355 - CVSS 7.2 (high), 2023-01-02: The LetsRecover WordPress plugin before 1.2.0 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection…