Wp Recipe Maker (Unknown) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-09-23. Vendor: Unknown.

CVEs of Wp Recipe Maker

• CVE-2026-86601 - CVSS 6.5 (medium), 2026-09-23: The WP Recipe Maker WordPress plugin before 10.8.2 does not remove shortcodes from comment content before expanding it while building a page's structured…
• CVE-2026-86608 - CVSS 8.2 (high), 2026-09-23: The WP Recipe Maker WordPress plugin before 10.8.2 does not have any authorisation check in one of its REST routes, nor does it bound what that route stores,…
• CVE-2026-86603 - CVSS 4.3 (medium), 2026-09-23: The WP Recipe Maker WordPress plugin before 10.8.2 does not have any authorisation check in one of its AJAX actions, allowing any authenticated user, such as…
• CVE-2026-86602 - CVSS 4.3 (medium), 2026-09-23: The WP Recipe Maker WordPress plugin before 10.8.2 does not perform any capability check in one of its AJAX actions, allowing any authenticated user, such as…
• CVE-2022-4468 - CVSS 5.4 (medium), 2023-01-09: The WP Recipe Maker WordPress plugin before 8.6.1 does not validate and escape some of its shortcode attributes before outputting them back in the page, which…