$ cve CVE-2024-32709 JSON

CVE-2024-32709

9.3

CRITICAL · CVSS 3.1 · EPSS 5.8% (pctl 93)

In your normal cycle

Critical by CVSS (9.3), but no sign of active exploitation.

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Plechev Andrey WP-Recall.This issue affects WP-Recall: from n/a through 16.26.5.

Scoring

CVSS	9.3 (CRITICAL, v3.1)
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
EPSS	5.8% — more likely to be exploited than 93% of all CVEs
Weakness	CWE-89
On CISA KEV	no
Public exploit	none known
Published	2024-04-24
Last modified	2026-06-17

References

https://patchstack.com/database/vulnerability/wp-recall/wordpress-wp-recall-plugin-16-26-5-sql-injection-vulnerability?_s_id=cve
https://patchstack.com/database/vulnerability/wp-recall/wordpress-wp-recall-plugin-16-26-5-sql-injection-vulnerability?_s_id=cve

→ the Explorer · watch your stack · NVD