WordPress security by component

LetsRecover

Plugin description

LetsRecover is a WordPress component with 3 published CVE records in this archive. The latest tracked vulnerability was published Jan 02, 2023; the highest CVE/CNA score is 9.8.

Plugin slug: letsrecover

Latest vulnerability

CVE-2022-4357: LetsRecover: SQL injection

LetsRecover is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data.

PublishedJan 02, 2023

Safe version guidanceSee mitigation notes

		Safe version
Jan 02, 2023	CVE-2022-4357 LetsRecover: SQL injection LetsRecover is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data.	See mitigation notes	CVE9.8 NVD9.8
Jan 02, 2023	CVE-2022-4356 LetsRecover: SQL injection LetsRecover is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.	See mitigation notes	CVE7.2 NVD7.2
Jan 02, 2023	CVE-2022-4355 LetsRecover: SQL injection LetsRecover is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.	See mitigation notes	CVE7.2 NVD7.2