İçeriğe atla
Noroxi

WP Recipe Maker

wp-recipe-maker · eklenti

WP Recipe Maker için bilinen güvenlik açıkları. Sitenizde bu bileşenin hangi sürümünün çalıştığını WP Lens ile saniyede öğrenin.

21 bilinen açık

1 kritik · 2 kayıt için istismar kodu yayımlanmış · son kayıt 18 Eyl 2026

Güvenlik açıkları

  • CVE-2026-89274

    WP Recipe Maker <= 10.8.1 - Unauthenticated Arbitrary Shortcode Execution via Recipe Comment Content

    Kritik 9.1

  • CVE-2024-1206

    WP Recipe Maker <= 9.1.2 - Missing Authorization to Authenticated (Subscriber+) SQL Injecton

    Yüksek 8.8

  • CVE-2025-14385

    WP Recipe Maker <= 10.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    Orta 6.4

  • CVE-2025-1503

    WP Recipe Maker <= 9.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

    Orta 6.4

  • CVE-2023-6970

    WP Recipe Maker <= 9.1.0 - Reflected Cross-Site Scripting via Referer

    Orta 6.1

  • CVE-2024-9650

    WP Recipe Maker <= 9.6.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'tooltip'

    Orta 5.4

  • CVE-2024-0383

    WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'group_tag'

    Orta 5.4

  • CVE-2024-3490

    WP Recipe Maker <= 9.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wprm-recipe-roundup-item Shortcode

    Orta 5.4

  • CVE-2024-0384

    WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Recipe Notes

    Orta 5.4

  • CVE-2024-0382

    WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via header_tag

    Orta 5.4

  • CVE-2024-0255

    WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via icon_color

    Orta 5.4

  • CVE-2024-0381

    WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tag'

    Orta 5.4

  • CVE-2023-6958

    WP Recipe Maker <= 9.1.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode

    Orta 5.4

  • CVE-2026-1558

    WP Recipe Maker <= 10.3.2 - Insecure Direct Object Reference to Unauthenticated Arbitrary Post Metadata Modification via 'recipeId' Parameter

    Orta 5.3

  • CVE-2025-62897

    WordPress WP Recipe Maker plugin < 10.1.0 - Content Injection vulnerability

    Orta 5.3

  • CVE-2024-1571

    WP Recipe Maker <= 9.2.1 - Authenticated Stored Cross-Site Scripting via Video Embed

    Orta 4.8

  • CVE-2026-75905

    WP Recipe Maker <= 10.8.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Recipe Ownership Takeover and Unpublishing via '[wprm-recipe]' Short

    Orta 4.3

  • CVE-2025-14742

    WP Recipe Maker <= 10.2.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure

    Orta 4.3

  • CVE-2026-24357

    WordPress WP Recipe Maker plugin <= 10.2.4 - Broken Access Control vulnerability

    Orta 4.3

  • CVE-2025-15527

    WP Recipe Maker <= 10.2.2 - Insecure Direct Object Reference to Sensitive Information Exposure

    Orta 4.3

  • CVE-2024-0380

    WP Recipe Maker <= 9.1.0 - Directory Traversal

    Orta 4.3

← Dizine dön