WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-recentcomments
Published
2011-09-22
Title
WP Recentcomments < 2.0.7 - XSS
Slug
wp-recipe-maker
Published
2022-12-19
Title
WP Recipe Maker < 8.6.1 - Contributor+ Stored XSS
Slug
wp-recipe-maker
Published
2024-01-17
Title
WP Recipe Maker < 9.1.1 - Contributor+ Stored Cross-Site Scripting via header_tag
Slug
wp-recipe-maker
Published
2024-01-17
Title
WP Recipe Maker < 9.1.1 - Reflected Cross-Site Scripting via Referer
Slug
wp-recipe-maker
Published
2024-01-17
Title
WP Recipe Maker < 9.1.1 - Directory Traversal
Slug
wp-recipe-maker
Published
2024-01-17
Title
WP Recipe Maker < 9.1.1 - Contributor+ Stored Cross-Site Scripting via icon_color
Slug
wp-recipe-maker
Published
2024-01-17
Title
WP Recipe Maker < 9.1.1 - Contributor+ Stored Cross-Site Scripting via Recipe Notes
Slug
wp-recipe-maker
Published
2024-01-17
Title
WP Recipe Maker < 9.1.1 - Contributor+ Stored Cross-Site Scripting via 'tag'
Slug
wp-recipe-maker
Published
2024-01-17
Title
WP Recipe Maker < 9.1.1 - Contributor+ Stored Cross-Site Scripting via Shortcode
Slug
wp-recipe-maker
Published
2024-02-07
Title
WP Recipe Maker < 9.2.0 - Missing Authorization to Authenticated (Subscriber+) SQL Injecton
Slug
wp-recipe-maker
Published
2024-03-14
Title
WP Recipe Maker < 9.3.0 - Authenticated Stored Cross-Site Scripting via Video Embed
Slug
wp-recipe-maker
Published
2024-05-01
Title
WP Recipe Maker < 9.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via wprm-recipe-roundup-item Shortcode
Slug
wp-recipe-maker
Published
2024-06-18
Title
WP Recipe Maker < 9.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'group_tag'
Slug
wp-recipe-maker
Published
2024-10-23
Title
WP Recipe Maker < 9.7.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'tooltip'
Slug
wp-recipe-maker
Published
2025-03-12
Title
WP Recipe Maker < 9.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-recipe-maker
Published
2025-09-26
Title
WP Recipe Maker < 10.1.0 - Unauthenticated Arbitrary Shortcode Execution
Slug
wp-recipe-maker
Published
2025-12-16
Title
WP Recipe Maker < 10.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
wp-recipe-maker
Published
2025-12-11
Title
WP Recipe Maker < 10.2.3 - Insecure Direct Object Reference to Sensitive Information Exposure
Slug
wp-recipe-maker
Published
2026-01-28
Title
Recipe Maker < 10.3.0 - Missing Authorization
Slug
wp-recipe-maker
Published
2026-02-24
Title
WP Recipe Maker < 10.3.0 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure
Slug
wp-recipe-maker
Published
2026-02-26
Title
WP Recipe Maker < 10.3.3 - Insecure Direct Object Reference to Unauthenticated Arbitrary Post Metadata Modification via 'recipeId' Parameter
Slug
wp-recipe-manager
Published
2026-01-06
Title
WP Recipe Manager <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Skill Level' Input Field
Slug
wp-record
Published
2025-11-21
Title
Construction Light < 1.6.8 - Subscriber+ Arbitrary Plugin Activation
Slug
wp-register-profile-with-shortcode
Published
2023-05-12
Title
WP Register Profile With Shortcode < 3.5.9 - Admin+ Stored XSS
Slug
wp-register-profile-with-shortcode
Published
2024-01-10
Title
WP Register Profile With Shortcode < 3.6.0 - Cross-Site Request Forgery to User Password Reset