← Back

Recall Products

recall-products

Vendor: Recall Products Project • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-25380
1Recall Products Project
1Recall Products
Jun 17, 2026
Sep 14, 2020
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Wordpress Plugin Store / Mike Rooijackers Recall Products V0.8 is affected by: Cross Site Scripting (XSS) via the 'Recall Settings' field in admin.php. An attacker can inject JavaScript code that will be stored and execu...Show more
Wordpress Plugin Store / Mike Rooijackers Recall Products V0.8 is affected by: Cross Site Scripting (XSS) via the 'Recall Settings' field in admin.php. An attacker can inject JavaScript code that will be stored and executed.Show less
CVE-2020-25379
1Recall Products Project
1Recall Products
Jun 17, 2026
Sep 14, 2020
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
Wordpress Plugin Store / Mike Rooijackers Recall Products V0.8 fails to sanitize input from the 'Manufacturer[]' parameter which allows an authenticated attacker to inject a malicious SQL query.