Exploit for SQL Injection in Plechevandrey Wp-Recall

Vulnerability Details

Basic Information

Title Exploit for SQL Injection in Plechevandrey Wp-Recall
Type githubexploit
Published 2025-05-03T23:06:41
Last Seen 2025-05-04T09:03:46
CVSS Score 9.8 (CRITICAL)

CVSS v3 Details

Attack Vector NETWORK
Attack Complexity LOW
Privileges Required NONE
User Interaction NONE
Scope UNCHANGED
Confidentiality Impact HIGH
Integrity Impact HIGH
Availability Impact HIGH

CVE Information

CVE IDs CVE-2025-1323
CWE
Bulletin Family exploit

Description

# cve-2025-1323
WP-Recall Plugin SQL Injection

## ⚠️ Legal Disclaimer

This tool is intended for **authorized security testing and educational use only**.
Do not use against systems without explicit permission. Misuse may be illegal.

## ✅ Requirements

– Python 3.x
– `requests` module

Install dependencies:

“`bash
pip install requests

python CVE-2025-1323.py

Enter target URL (e.g. https://target.com/wp-admin/admin-ajax.php): https://example.com/wp-admin/admin-ajax.php
Enter ajax_nonce value: 37c11b0c06

[*] Sending payload: ‘; SELECT user(); —

[+] Response received:
{“result”:”SQL error or leaked data here…”}

Impact Assessment

Base Score 9.8
Severity CRITICAL

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.