Skip to content

Brechtvds vulnerabilities

Products

Newest

brechtvds wp recipe maker WP Recipe Maker < 10.9.2 - Unauthenticated Password-Protected Recipe Disclosure CVE-2026-122060 No scoreNovember 8, 2026
bootstrapped ventures wp recipe maker WordPress WP Recipe Maker plugin <= 10.9.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-119489 6.5 MediumNovember 7, 2026
brechtvds wp recipe maker WP Recipe Maker < 10.8.2 - Unauthenticated Arbitrary Shortcode Execution via Comment Content CVE-2026-86601 6.5 MediumSeptember 23, 2026
brechtvds wp recipe maker WP Recipe Maker 9.8.0 - 10.8.1 - Unauthenticated DoS via Unbounded User Meta Insertion CVE-2026-86608 8.2 HighSeptember 23, 2026
brechtvds wp recipe maker WP Recipe Maker < 10.8.2 - Subscriber+ Non-Public List Title Disclosure via wprm_search_lists CVE-2026-86603 4.3 MediumSeptember 23, 2026
brechtvds wp recipe maker WP Recipe Maker 10.3.0 - 10.8.1 - Subscriber+ Draft and Private Recipe Content Disclosure via wprm_shortcode_preview CVE-2026-86602 4.3 MediumSeptember 23, 2026
brechtvds wp recipe maker WP Recipe Maker <= 10.8.1 - Unauthenticated Arbitrary Shortcode Execution via Recipe Comment Content CVE-2026-89274 Public exploit 9.1 CriticalSeptember 19, 2026
brechtvds wp recipe maker WP Recipe Maker <= 10.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'notes' Parameter via REST Preview Endpoint CVE-2026-90884 5.4 MediumSeptember 18, 2026
brechtvds wp recipe maker WP Recipe Maker <= 10.8.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Recipe Ownership Takeover and Unpublishing via '[wprm-recipe]' Shortcode CVE-2026-75905 4.3 MediumSeptember 9, 2026
brechtvds easy image collage Easy Image Collage <= 1.13.6 - Authenticated (Author+) Stored Cross-Site Scripting via 'grid[properties][borderColor]' and 'grid[images][N][attachment_url]' Parameters CVE-2026-9019 6.4 MediumJune 10, 2026
brechtvds wp recipe maker WP Recipe Maker <= 10.3.2 - Insecure Direct Object Reference to Unauthenticated Arbitrary Post Metadata Modification via 'recipeId' Parameter CVE-2026-1558 5.3 MediumFebruary 27, 2026
brechtvds wp recipe maker WP Recipe Maker <= 10.2.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure CVE-2025-14742 4.3 MediumFebruary 25, 2026
brechtvds dynamic widget content Dynamic Widget Content <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Content Field CVE-2026-1268 6.4 MediumFebruary 5, 2026
brecht wp recipe maker WordPress WP Recipe Maker plugin <= 10.2.4 - Broken Access Control vulnerability CVE-2026-24357 4.3 MediumJanuary 22, 2026
brechtvds wp recipe maker WP Recipe Maker <= 10.2.2 - Insecure Direct Object Reference to Sensitive Information Exposure CVE-2025-15527 4.3 MediumJanuary 16, 2026
brechtvds wp recipe maker WP Recipe Maker <= 10.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2025-14385 6.4 MediumDecember 17, 2025
brecht visual link preview Visual Link Preview <= 2.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via visual-link-preview Shortcode CVE-2025-11987 6.4 MediumNovember 5, 2025
brecht wp recipe maker WordPress WP Recipe Maker plugin < 10.1.0 - Content Injection vulnerability CVE-2025-62897 5.3 MediumOctober 27, 2025
brecht custom related posts WordPress Custom Related Posts plugin <= 1.7.4 - Cross Site Scripting (XSS) Vulnerability CVE-2025-46227 6.5 MediumApril 22, 2025
brechtvds wp recipe maker WP Recipe Maker <= 9.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-1503 6.4 MediumMarch 13, 2025
brecht custom related posts Custom Related Posts <= 1.7.3 - Missing Authorization to Authenticated (Subscriber+) Private Post Search and Relation Updates CVE-2024-12825 5.4 MediumFebruary 1, 2025
bootstrapped wp recipe maker WP Recipe Maker <= 9.6.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'tooltip' CVE-2024-9650 6.5 MediumOctober 24, 2024
brechtvds wp ultimate post grid WP Ultimate Post Grid <= 3.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpupg-grid-with-filters Shortcode CVE-2024-9051 6.4 MediumOctober 11, 2024
brechtvds easy affiliate links Easy Affiliate Links <= 3.7.3 - Missing Authorization to Authenticated (Subscriber+) Settings Reset CVE-2024-5864 4.3 MediumJune 28, 2024
brechtvds easy image collage Easy Image Collage <= 1.13.5 - Missing Authorization to Authenticated (Contributor+) Data Clearance CVE-2024-5863 5.4 MediumJune 28, 2024
bootstrapped wp recipe maker WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'group_tag' CVE-2024-0383 6.4 MediumJune 19, 2024
brechtvds wp ultimate post grid WP Ultimate Post Grid <= 3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpupg-text Shortcode CVE-2024-4043 6.4 MediumMay 23, 2024
bootstrapped ventures easy affiliate links WordPress Easy Affiliate Links plugin <= 3.7.2 - Cross Site Scripting (XSS) vulnerability CVE-2024-34441 6.5 MediumMay 9, 2024
bootstrapped wp recipe maker, wordpress recipe maker +1 more WP Recipe Maker <= 9.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wprm-recipe-roundup-item Shortcode CVE-2024-3490 6.4 MediumMay 2, 2024
bootstrapped wp recipe maker WP Recipe Maker <= 9.2.1 - Authenticated Stored Cross-Site Scripting via Video Embed CVE-2024-1571 4.4 MediumApril 9, 2024
bootstrapped wp recipe maker WP Recipe Maker <= 9.1.2 - Missing Authorization to Authenticated (Subscriber+) SQL Injecton CVE-2024-1206 8.8 HighFebruary 20, 2024
bootstrapped wp recipe maker WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Recipe Notes CVE-2024-0384 6.4 MediumFebruary 5, 2024
bootstrapped wp recipe maker WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via icon_color CVE-2024-0255 6.4 MediumFebruary 5, 2024
bootstrapped wp recipe maker WP Recipe Maker <= 9.1.0 - Directory Traversal CVE-2024-0380 5.4 MediumFebruary 5, 2024
bootstrapped wp recipe maker WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via header_tag CVE-2024-0382 6.4 MediumFebruary 5, 2024
bootstrapped wp recipe maker WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tag' CVE-2024-0381 6.4 MediumJanuary 18, 2024
bootstrapped wp recipe maker WP Recipe Maker <= 9.1.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2023-6958 6.4 MediumJanuary 18, 2024
bootstrapped wp recipe maker WP Recipe Maker <= 9.1.0 - Reflected Cross-Site Scripting via Referer CVE-2023-6970 6.1 MediumJanuary 18, 2024
bootstrapped easy affiliate links Easy Affiliate Links < 3.7.1 - Contributor+ Stored XSS CVE-2023-0375 5.4 MediumFebruary 21, 2023
bootstrapped wp recipe maker WP Recipe Maker < 8.6.1 - Contributor+ Stored XSS CVE-2022-4468 5.4 MediumJanuary 9, 2023