Bbrechtvds

Products

Exploited and recent CVEs

• CVE-2026-89274 Critical 9.1 WP Recipe Maker <= 10.8.1 - Unauthenticated Arbitrary Shortcode Execution via Recipe Comment Content 0.7%
• CVE-2026-90884 Medium 5.4 WP Recipe Maker <= 10.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'notes' Parameter via REST Preview Endpoint 0.2%
• CVE-2026-75905 Medium 4.3 WP Recipe Maker <= 10.8.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Recipe Ownership Takeover and Unpublishing via '[wprm-recipe]' Shortcode 0.4%
• CVE-2026-9019 Medium 6.4 Easy Image Collage <= 1.13.6 - Authenticated (Author+) Stored Cross-Site Scripting via 'grid[properties][borderColor]' and 'grid[images][N][attachment_url]' Parameters 0.2%
• CVE-2026-1558 Medium 5.3 WP Recipe Maker <= 10.3.2 - Insecure Direct Object Reference to Unauthenticated Arbitrary Post Metadata Modification via 'recipeId' Parameter 0.3%
• CVE-2025-14742 Medium 4.3 WP Recipe Maker <= 10.2.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure 0.3%
• CVE-2026-1268 Medium 6.4 Dynamic Widget Content <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Content Field 0.3%
• CVE-2025-15527 Medium 4.3 WP Recipe Maker <= 10.2.2 - Insecure Direct Object Reference to Sensitive Information Exposure 0.3%
• CVE-2025-14385 Medium 6.4 WP Recipe Maker <= 10.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.3%
• CVE-2025-11987 Medium 6.4 Visual Link Preview <= 2.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via visual-link-preview Shortcode 0.2%
• CVE-2025-1503 Medium 6.4 WP Recipe Maker <= 9.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
• CVE-2024-12825 Medium 5.4 Custom Related Posts <= 1.7.3 - Missing Authorization to Authenticated (Subscriber+) Private Post Search and Relation Updates 0.3%
• CVE-2024-9650 Medium 6.5 WP Recipe Maker <= 9.6.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'tooltip' 0.4%
• CVE-2024-9051 Medium 6.4 WP Ultimate Post Grid <= 3.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpupg-grid-with-filters Shortcode 0.3%
• CVE-2024-5864 Medium 4.3 Easy Affiliate Links <= 3.7.3 - Missing Authorization to Authenticated (Subscriber+) Settings Reset 0.4%
• CVE-2024-5863 Medium 5.4 Easy Image Collage <= 1.13.5 - Missing Authorization to Authenticated (Contributor+) Data Clearance 0.5%
• CVE-2024-0383 Medium 6.4 WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'group_tag' 0.4%
• CVE-2024-4043 Medium 6.4 WP Ultimate Post Grid <= 3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpupg-text Shortcode 0.3%
• CVE-2024-3490 Medium 6.4 WP Recipe Maker <= 9.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wprm-recipe-roundup-item Shortcode 0.3%
• CVE-2024-1571 Medium 4.4 WP Recipe Maker <= 9.2.1 - Authenticated Stored Cross-Site Scripting via Video Embed 0.4%
• CVE-2024-1206 High 8.8 WP Recipe Maker <= 9.1.2 - Missing Authorization to Authenticated (Subscriber+) SQL Injecton 0.7%
• CVE-2024-0384 Medium 6.4 WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Recipe Notes 0.6%
• CVE-2024-0255 Medium 6.4 WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via icon_color 0.5%
• CVE-2024-0380 Medium 5.4 WP Recipe Maker <= 9.1.0 - Directory Traversal 0.8%
• CVE-2024-0382 Medium 6.4 WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via header_tag 0.6%
• CVE-2023-6958 Medium 6.4 WP Recipe Maker <= 9.1.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode 0.3%
• CVE-2024-0381 Medium 6.4 WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tag' 0.6%
• CVE-2023-6970 Medium 6.1 WP Recipe Maker <= 9.1.0 - Reflected Cross-Site Scripting via Referer 0.7%