Input validation vulnerability in WP-Recall – Registration, Profile, Commerce & More 16.24.47

The WP-Recall plugin for WordPress is vulnerable to a type of security issue called Reflected Cross-Site Scripting. This type of attack happens when a user is tricked into performing an action like clicking on a link. This vulnerability affects versions of WP-Recall up to and including 16.24.47 because the software does not properly check the information it receives from users and does not properly protect the information it sends out. This makes it possible for an attacker to inject malicious web scripts into pages that will then be executed.