WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-recipe-maker
Published
2024-02-07
Title
WP Recipe Maker < 9.2.0 - Missing Authorization to Authenticated (Subscriber+) SQL Injecton
Slug
wp-recipe-maker
Published
2024-03-14
Title
WP Recipe Maker < 9.3.0 - Authenticated Stored Cross-Site Scripting via Video Embed
Slug
wp-recipe-maker
Published
2024-05-01
Title
WP Recipe Maker < 9.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via wprm-recipe-roundup-item Shortcode
Slug
wp-recipe-maker
Published
2024-06-18
Title
WP Recipe Maker < 9.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'group_tag'
Slug
wp-recipe-maker
Published
2024-10-23
Title
WP Recipe Maker < 9.7.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'tooltip'
Slug
wp-recipe-maker
Published
2025-03-12
Title
WP Recipe Maker < 9.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-recipe-maker
Published
2025-09-26
Title
WP Recipe Maker < 10.1.0 - Unauthenticated Arbitrary Shortcode Execution
Slug
wp-recipe-maker
Published
2025-12-16
Title
WP Recipe Maker < 10.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
wp-recipe-maker
Published
2025-12-11
Title
WP Recipe Maker < 10.2.3 - Insecure Direct Object Reference to Sensitive Information Exposure
Slug
wp-recipe-maker
Published
2026-01-28
Title
Recipe Maker < 10.3.0 - Missing Authorization
Slug
wp-recipe-maker
Published
2026-02-24
Title
WP Recipe Maker < 10.6.1 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure
Slug
wp-recipe-maker
Published
2026-02-26
Title
WP Recipe Maker < 10.3.3 - Insecure Direct Object Reference to Unauthenticated Arbitrary Post Metadata Modification via 'recipeId' Parameter
Slug
wp-recipe-manager
Published
2026-01-06
Title
WP Recipe Manager <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Skill Level' Input Field
Slug
wp-record
Published
2025-11-21
Title
Construction Light < 1.6.8 - Subscriber+ Arbitrary Plugin Activation
Slug
wp-redirection
Published
2026-05-11
Title
WP-Redirection <= 1.0.3 - Cross-Site Request Forgery to Settings Update
Slug
wp-register-profile-with-shortcode
Published
2023-05-12
Title
WP Register Profile With Shortcode < 3.5.9 - Admin+ Stored XSS
Slug
wp-register-profile-with-shortcode
Published
2024-01-10
Title
WP Register Profile With Shortcode < 3.6.0 - Cross-Site Request Forgery to User Password Reset
Slug
wp-register-profile-with-shortcode
Published
2025-06-19
Title
WP Register Profile With Shortcode <= 3.6.4 - Contributor+ Stored XSS
Slug
wp-register-profile-with-shortcode
Published
2025-07-10
Title
WP Register Profile With Shortcode < 3.6.3 - Authenticated (Contributor+) Sensitive Information Exposure
Slug
wp-registration
Published
2024-10-17
Title
Simple User Registration < 6.8 - Unauthenticated Account Takeover
Slug
wp-registration
Published
2024-12-02
Title
Simple User Registration < 6.0 - Missing Authorization to User Deletion
Slug
wp-registration
Published
2025-06-25
Title
Simple User Registration < 6.4 - Unauthenticated Privilege Escalation
Slug
wp-registration
Published
2025-09-20
Title
Simple User Registration <= 6.4 - Authenticated (Contributor+) Privilege Escalation
Slug
wp-registration
Published
2025-11-20
Title
Simple User Registration < 6.7 - Unauthenticated Stored Cross-Site Scripting
Slug
wp-registration
Published
2026-01-27
Title
Simple User Registration < 6.8 - Authenticated (Subscriber+) Privilege Escalation via profile_save_field