Medium · 6.5 CVE-2026-119489 EUVD-2026-119009GHSA-gvrr-768p-vffx

WordPress WP Recipe Maker plugin <= 10.9.1 - Cross Site Scripting (XSS) vulnerability

Published Nov 7, 2026 · Updated Nov 7, 2026 · Assigned by Patchstack

Vendor: Bootstrapped Ventures Product: WP Recipe Maker

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bootstrapped Ventures WP Recipe Maker wp-recipe-maker allows Stored XSS.This issue affects WP Recipe Maker: from n/a through 10.9.1.

Affected products

Vendor	Product	Affected	Fixed
Bootstrapped Ventures	WP Recipe Maker	≤ 10.9.1	—

References

https://patchstack.com/database/wordpress/plugin/wp-recipe-maker/vulnerability/wordpress-wp-recipe-maker-plugin-10-9-1-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry