Information Exposure Vulnerability in WP-Recall Plugin for WordPress

CVE-2025-1322

Summary

The WP-Recall plugin for WordPress is susceptible to an information exposure vulnerability due to inadequate restrictions in the 'feed' shortcode. This flaw allows unauthenticated adversaries to access sensitive data from password-protected, private, or draft posts, which they should not have permission to view. As a result, potential attackers can exploit this vulnerability to gain unauthorized access to confidential information, posing a significant risk to user privacy and data integrity.

References