CVE-2026-122060
WP Recipe Maker < 10.9.2 - Unauthenticated Password-Protected Recipe Disclosure
The WP Recipe Maker WordPress plugin before 10.9.2 does not check whether the post a recipe is embedded in is password protected before returning the recipe through its REST API and structured data output, allowing unauthenticated users to read the full content of recipes in password-protected posts.
What each source reports
CVE List No score
WP Recipe Maker < 10.9.2 - Unauthenticated Password-Protected Recipe Disclosure
The WP Recipe Maker WordPress plugin before 10.9.2 does not check whether the post a recipe is embedded in is password protected before returning the recipe through its REST API and structured data output, allowing unauthenticated users to read the full content of recipes in password-protected posts.
- Record
CVE-2026-122060- Updated
- 2026-11-08
GitHub AdvisoriesGHSA-prj8-x666-xqff No score
The WP Recipe Maker WordPress plugin before 10.9.2 does not check whether the post a recipe is...
The WP Recipe Maker WordPress plugin before 10.9.2 does not check whether the post a recipe is embedded in is password protected before returning the recipe through its REST API and structured data output, allowing unauthenticated users to read the full content of recipes in password-protected posts.
- Record
GHSA-prj8-x666-xqff- Updated
- 2026-11-08
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, references | GitHub Advisories | |
| first indexed | CVE List |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-122060 is a vulnerability with no CVSS score yet in Unknown Wp Recipe Maker, published November 8, 2026. No source lists public exploit code. No source names a fixed version.