brechtvds WP Recipe Maker

• CVE-2026-89274 Critical 9.1 WP Recipe Maker <= 10.8.1 - Unauthenticated Arbitrary Shortcode Execution via Recipe Comment Content 0.7%
• CVE-2026-90884 Medium 5.4 WP Recipe Maker <= 10.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'notes' Parameter via REST Preview Endpoint 0.2%
• CVE-2026-75905 Medium 4.3 WP Recipe Maker <= 10.8.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Recipe Ownership Takeover and Unpublishing via '[wprm-recipe]' Shortcode 0.4%
• CVE-2026-1558 Medium 5.3 WP Recipe Maker <= 10.3.2 - Insecure Direct Object Reference to Unauthenticated Arbitrary Post Metadata Modification via 'recipeId' Parameter 0.3%
• CVE-2025-14742 Medium 4.3 WP Recipe Maker <= 10.2.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure 0.3%
• CVE-2025-15527 Medium 4.3 WP Recipe Maker <= 10.2.2 - Insecure Direct Object Reference to Sensitive Information Exposure 0.3%
• CVE-2025-14385 Medium 6.4 WP Recipe Maker <= 10.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.3%
• CVE-2025-1503 Medium 6.4 WP Recipe Maker <= 9.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
• CVE-2024-9650 Medium 6.5 WP Recipe Maker <= 9.6.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'tooltip' 0.4%
• CVE-2024-0383 Medium 6.4 WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'group_tag' 0.4%
• CVE-2024-3490 Medium 6.4 WP Recipe Maker <= 9.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wprm-recipe-roundup-item Shortcode 0.3%
• CVE-2024-1571 Medium 4.4 WP Recipe Maker <= 9.2.1 - Authenticated Stored Cross-Site Scripting via Video Embed 0.4%
• CVE-2024-1206 High 8.8 WP Recipe Maker <= 9.1.2 - Missing Authorization to Authenticated (Subscriber+) SQL Injecton 0.7%
• CVE-2024-0384 Medium 6.4 WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Recipe Notes 0.6%
• CVE-2024-0255 Medium 6.4 WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via icon_color 0.5%
• CVE-2024-0380 Medium 5.4 WP Recipe Maker <= 9.1.0 - Directory Traversal 0.8%
• CVE-2024-0382 Medium 6.4 WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via header_tag 0.6%
• CVE-2023-6958 Medium 6.4 WP Recipe Maker <= 9.1.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode 0.3%
• CVE-2024-0381 Medium 6.4 WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tag' 0.6%
• CVE-2023-6970 Medium 6.1 WP Recipe Maker <= 9.1.0 - Reflected Cross-Site Scripting via Referer 0.7%