Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-11-13
LetsRecover - Security Vulnerability (CVE-2026-116059)
The LetsRecover WordPress plugin through 1.2.0 does not sanitize a user-supplied value that is used as a database column name in one of its unauthenticated AJAX actions, allowing unauthenticated attackers to append SQL to the query and read arbitrary data from the database, which is then returned through a second unauthenticated action.
PLUGIN
LetsRecover
CVE-2026-116059
Risk Score
Threat Entry
Updated 2026-06-17
Letsrecover - SQL Injection (CVE-2022-4357)
The LetsRecover WordPress plugin before 1.2.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.
PLUGIN
Letsrecover
CVE-2022-4357
Risk Score
Threat Entry
Updated 2026-06-17
Letsrecover - SQL Injection (CVE-2022-4356)
The LetsRecover WordPress plugin before 1.2.0 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin
PLUGIN
Letsrecover
CVE-2022-4356
Risk Score
Threat Entry
Updated 2026-06-17
Letsrecover - SQL Injection (CVE-2022-4355)
The LetsRecover WordPress plugin before 1.2.0 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin
PLUGIN
Letsrecover
CVE-2022-4355
Risk Score