Skip to content
OpenAdvisories

Vendor

tggfref

4 known vulnerabilities.

Products

WP-Recall 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2025-52796

    WordPress WP-Recall <= 16.26.14 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tggfref WP-Recall allows Reflected XSS. This issue affects WP-Recall: from n/a through 16.26.14.

    tggfref WP-Recall
  • High 7.5
    CVE-2025-47653

    WordPress WP-Recall <= 16.26.14 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in tggfref WP-Recall allows PHP Local File Inclusion. This issue affects WP-Recall: from n/a through 16.26.14.

    tggfref WP-Recall