PT-2025-24186 · WordPress · Wp-Recall

0Xd4Rk5Id3 · CVE-2025-30981 · Publicado 2025-06-06 · Atualizado 2025-06-06

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions WP-Recall versions prior to 16.26.14

Description A Cross-Site Request Forgery (CSRF) issue allows Privilege Escalation. This is a type of attack where an attacker tricks a user into performing unintended actions on a web application that the user is authenticated to.

Recommendations For versions prior to 16.26.14, update to version 16.26.14 or later to resolve the issue.

Correção

LPE

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2025-30981

Produtos afetados

Wp-Recall

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-30981 · Nota de Segurança
• https://twitter.com/CVEnew/status/1931037309786362267 · Publicação no Twitter
• https://patchstack.com/database/wordpress/plugin/wp-recall/vulnerability/wordpress-wp-recall-plugin-16-26-14-csrf-to-privilege-escalation-vulnerability?_s_id=cve · Nota
• https://patchstack.com/database/Wordpress/Plugin/wp-recall/vulnerability/wordpress-wp-recall-plugin-16-26-14-csrf-to-privilege-escalation-vulnerability?_s_id=cve · Nota