https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-4357.htmlhttps://patchthecve.com/cve/CVE-2022-4357.htmlWed, 17 Jun 2026 05:20:40 +0000CRITICAL 9.8: The LetsRecover WordPress plugin before 1.2.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.https://patchthecve.com/cve/CVE-2022-4356.htmlhttps://patchthecve.com/cve/CVE-2022-4356.htmlWed, 17 Jun 2026 05:20:40 +0000HIGH 7.2: The LetsRecover WordPress plugin before 1.2.0 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as adminhttps://patchthecve.com/cve/CVE-2022-4355.htmlhttps://patchthecve.com/cve/CVE-2022-4355.htmlWed, 17 Jun 2026 05:20:40 +0000HIGH 7.2: The LetsRecover WordPress plugin before 1.2.0 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin