Skip to contentBrechtvds Wp Recipe Maker vulnerabilities
- brechtvds wp recipe makerWP Recipe Maker < 10.9.2 - Unauthenticated Password-Protected Recipe DisclosureCVE-2026-1220605.3 Medium
- bootstrapped ventures wp recipe makerWordPress WP Recipe Maker plugin <= 10.9.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-1194896.5 Medium
- brechtvds wp recipe makerWP Recipe Maker < 10.8.2 - Unauthenticated Arbitrary Shortcode Execution via Comment ContentCVE-2026-866016.5 Medium
- brechtvds wp recipe makerWP Recipe Maker 9.8.0 - 10.8.1 - Unauthenticated DoS via Unbounded User Meta InsertionCVE-2026-866088.2 High
- brechtvds wp recipe makerWP Recipe Maker < 10.8.2 - Subscriber+ Non-Public List Title Disclosure via wprm_search_listsCVE-2026-866034.3 Medium
- brechtvds wp recipe makerWP Recipe Maker 10.3.0 - 10.8.1 - Subscriber+ Draft and Private Recipe Content Disclosure via wprm_shortcode_previewCVE-2026-866024.3 Medium
- brechtvds wp recipe makerWP Recipe Maker <= 10.8.1 - Unauthenticated Arbitrary Shortcode Execution via Recipe Comment ContentCVE-2026-89274Public exploit9.1 Critical
- brechtvds wp recipe makerWP Recipe Maker <= 10.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'notes' Parameter via REST Preview EndpointCVE-2026-908845.4 Medium
- brechtvds wp recipe makerWP Recipe Maker <= 10.8.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Recipe Ownership Takeover and Unpublishing via '[wprm-recipe]' ShortcodeCVE-2026-759054.3 Medium
- brechtvds wp recipe makerWP Recipe Maker <= 10.3.2 - Insecure Direct Object Reference to Unauthenticated Arbitrary Post Metadata Modification via 'recipeId' ParameterCVE-2026-15585.3 Medium
- brechtvds wp recipe makerWP Recipe Maker <= 10.2.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information ExposureCVE-2025-147424.3 Medium
- brecht wp recipe makerWordPress WP Recipe Maker plugin <= 10.2.4 - Broken Access Control vulnerabilityCVE-2026-243574.3 Medium
- brechtvds wp recipe makerWP Recipe Maker <= 10.2.2 - Insecure Direct Object Reference to Sensitive Information ExposureCVE-2025-155274.3 Medium
- brechtvds wp recipe makerWP Recipe Maker <= 10.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2025-143856.4 Medium
- brecht wp recipe makerWordPress WP Recipe Maker plugin < 10.1.0 - Content Injection vulnerabilityCVE-2025-628975.3 Medium
- brechtvds wp recipe makerWP Recipe Maker <= 9.8.0 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2025-15036.4 Medium
- bootstrapped wp recipe makerWP Recipe Maker <= 9.6.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'tooltip'CVE-2024-96506.5 Medium
- bootstrapped wp recipe makerWP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'group_tag'CVE-2024-03836.4 Medium
- bootstrapped wp recipe maker, wordpress recipe maker +1 moreWP Recipe Maker <= 9.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wprm-recipe-roundup-item ShortcodeCVE-2024-34906.4 Medium
- bootstrapped wp recipe makerWP Recipe Maker <= 9.2.1 - Authenticated Stored Cross-Site Scripting via Video EmbedCVE-2024-15714.4 Medium
- bootstrapped wp recipe makerWP Recipe Maker <= 9.1.2 - Missing Authorization to Authenticated (Subscriber+) SQL InjectonCVE-2024-12068.8 High
- bootstrapped wp recipe makerWP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Recipe NotesCVE-2024-03846.4 Medium
- bootstrapped wp recipe makerWP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via icon_colorCVE-2024-02556.4 Medium
- bootstrapped wp recipe makerWP Recipe Maker <= 9.1.0 - Directory TraversalCVE-2024-03805.4 Medium
- bootstrapped wp recipe makerWP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via header_tagCVE-2024-03826.4 Medium
- bootstrapped wp recipe makerWP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tag'CVE-2024-03816.4 Medium
- bootstrapped wp recipe makerWP Recipe Maker <= 9.1.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2023-69586.4 Medium
- bootstrapped wp recipe makerWP Recipe Maker <= 9.1.0 - Reflected Cross-Site Scripting via RefererCVE-2023-69706.1 Medium
- bootstrapped wp recipe makerWP Recipe Maker < 8.6.1 - Contributor+ Stored XSSCVE-2022-44685.4 Medium