CVE-2025-1323

HIGH NUCLEI

WP-Recall < 16.26.10 - Unauthenticated SQL Injection via Databeat Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2025-1323. PoCs published by p33d. A Nuclei detection template is also available.

AI-analyzed exploit summary This PoC demonstrates a SQL injection vulnerability in the WP-Recall plugin by crafting a malicious payload in the 'last_activity' parameter. The exploit sends a crafted request to the WordPress admin-ajax.php endpoint, leveraging an SQLi payload to extract database information.

Description

The WP-Recall – Registration, Profile, Commerce & More plugin for WordPress is vulnerable to SQL Injection via the 'databeat' parameter in all versions up to, and including, 16.26.10 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.

Exploits (1)

nomisec WORKING POC
by p33d · poc
https://github.com/p33d/cve-2025-1323

This PoC demonstrates a SQL injection vulnerability in the WP-Recall plugin by crafting a malicious payload in the 'last_activity' parameter. The exploit sends a crafted request to the WordPress admin-ajax.php endpoint, leveraging an SQLi payload to extract database information.

Classification
Working Poc 95%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: WP-Recall Plugin (version not specified)
Auth required
Prerequisites: Valid target URL · Valid ajax_nonce value
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Nuclei Templates (1)

WP-Recall – Plugin <= 16.26.10 - Unauthenticated SQL Injection
HIGHby iamnoooob,rootxharsh,pdresearch
Shodan: http.html:"/wp-content/plugins/wp-recall/"
FOFA: body=/wp-content/plugins/wp-recall/

Scores

CVSS v3 7.5
EPSS 0.0289
EPSS Percentile 85.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-89
Status published
Products (2)
plechevandrey/wp-recall < 16.26.12
wppost/WP-Recall – Registration, Profile, Commerce & More < 16.26.10
Published Mar 08, 2025
Tracked Since Feb 18, 2026