Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

WP Recipe Maker — Vulnerabilities & Security Advisories 20

All 20 CVE vulnerabilities found in WP Recipe Maker, with AI-generated Chinese analysis, references, and POCs.

This page catalogs vulnerabilities affecting WP Recipe Maker, a popular WordPress plugin, categorized under weakness types such as cross-site scripting and broken access control. It aggregates known security issues reported for this specific product, covering a broad historical timeframe from initial releases through recent updates to ensure comprehensive coverage of past and present risks. Visitors can utilize this resource to track a vendor's advisories by observing how the WP Recipe Maker team responds to and resolves security flaws over time. The content helps users understand the broader implications of specific weakness classes by providing real-world examples within the context of recipe management software. Additionally, users can look up a product's vulnerability history to assess its long-term security posture and identify recurring patterns in code quality or patching practices. This information supports informed decision-making for website administrators who rely on the plugin, allowing them to evaluate the stability and safety of their installations based on historical data. The aggregation aims to provide transparency regarding known issues without speculating on unverified threats. By consolidating these records, the page serves as a reference point for security researchers and developers interested in the maintenance standards of widely used WordPress extensions. Readers are encouraged to review the detailed entries to gain insights into the nature of each reported flaw and its potential impact on site integrity.

Vendor: Unknown

CVE IDTitleCVSSSeverityPublished
CVE-2026-1558 WP Recipe Maker <= 10.3.2 - Insecure Direct Object Reference to Unauthenticated Arbitrary Post Metadata Modification via 'recipeId' Parameter CWE-639 5.3 Medium2026-02-27
CVE-2025-14742 WP Recipe Maker <= 10.2.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure CWE-639 4.3 Medium2026-02-25
CVE-2026-24357 WordPress WP Recipe Maker plugin <= 10.2.4 - Broken Access Control vulnerability CWE-862 4.3 Medium2026-01-22
CVE-2025-15527 WP Recipe Maker <= 10.2.2 - Insecure Direct Object Reference to Sensitive Information Exposure CWE-200 4.3 Medium2026-01-16
CVE-2025-14385 WP Recipe Maker <= 10.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CWE-79 6.4 Medium2025-12-17
CVE-2025-62897 WordPress WP Recipe Maker plugin < 10.1.0 - Content Injection vulnerability CWE-80 5.3 Medium2025-10-27
CVE-2025-1503 WP Recipe Maker <= 9.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium2025-03-13
CVE-2024-9650 WP Recipe Maker <= 9.6.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'tooltip' CWE-79 6.5 Medium2024-10-24
CVE-2024-0383 WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'group_tag' CWE-79 6.4 Medium2024-06-19
CVE-2024-3490 WP Recipe Maker <= 9.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wprm-recipe-roundup-item Shortcode CWE-79 6.4 Medium2024-05-02
CVE-2024-1571 WP Recipe Maker <= 9.2.1 - Authenticated Stored Cross-Site Scripting via Video Embed CWE-79 4.4 Medium2024-04-09
CVE-2024-1206 WP Recipe Maker <= 9.1.2 - Missing Authorization to Authenticated (Subscriber+) SQL Injecton CWE-89 8.8 High2024-02-20
CVE-2024-0384 WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Recipe Notes CWE-79 6.4 Medium2024-02-05
CVE-2024-0255 WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via icon_color CWE-79 6.4 Medium2024-02-05
CVE-2024-0380 WP Recipe Maker <= 9.1.0 - Directory Traversal CWE-22 5.4 Medium2024-02-05
CVE-2024-0382 WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via header_tag CWE-79 6.4 Medium2024-02-05
CVE-2024-0381 WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tag' CWE-79 6.4 Medium2024-01-18
CVE-2023-6958 WP Recipe Maker <= 9.1.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode CWE-79 6.4 Medium2024-01-18
CVE-2023-6970 WP Recipe Maker <= 9.1.0 - Reflected Cross-Site Scripting via Referer CWE-79 6.1 Medium2024-01-18
CVE-2022-4468 WP Recipe Maker < 8.6.1 - Contributor+ Stored XSS 5.4 -2023-01-09

All 20 known CVE vulnerabilities affecting WP Recipe Maker with full Chinese analysis, references, and POCs where available.