Skip to content
OpenAdvisories

Vendor

brechtvds

28 known vulnerabilities.

Products

WP Recipe Maker 20 WP Ultimate Post Grid 2 Easy Image Collage 2 Dynamic Widget Content 1 Custom Related Posts 1 Easy Affiliate Links 1 Visual Link Preview 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-89274 Public exploit

    WP Recipe Maker <= 10.8.1 - Unauthenticated Arbitrary Shortcode Execution via Recipe Comment Content

    The WP Recipe Maker plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in all versions up to, and including, 10.8.1. The vulnerability exists because `WPRM_Metadata::sanitize_metadata()` recursively calls `do_shortcode()` on every scalar fiel…

    brechtvds WP Recipe Maker Web / CMS