VendorsBootstrappedwp_recipe_makerany version
Vulnerabilities

Bootstrapped Ventures WP Recipe Maker any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

13CVEs
CVE-2024-1206
WP Recipe Maker <= 9.1.2 - Missing Authorization to Authenticated (Subscriber+) SQL Injecton
Published 2024-02-20 · Modified
8.8EPSS 0.007
CVE-2024-9650
WP Recipe Maker <= 9.6.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'tooltip'
Published 2024-10-24 · Analyzed
6.5EPSS 0.004
CVE-2024-0381
WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tag'
Published 2024-01-18 · Modified
6.4EPSS 0.006
CVE-2024-0382
WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via header_tag
Published 2024-02-05 · Modified
6.4EPSS 0.006
CVE-2024-0384
WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Recipe Notes
Published 2024-02-05 · Modified
6.4EPSS 0.006
CVE-2024-0255
WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via icon_color
Published 2024-02-05 · Modified
6.4EPSS 0.005
CVE-2024-0383
WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'group_tag'
Published 2024-06-19 · Modified
6.4EPSS 0.004
CVE-2023-6958
WP Recipe Maker <= 9.1.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Published 2024-01-18 · Modified
6.4EPSS 0.003
CVE-2024-3490
WP Recipe Maker <= 9.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wprm-recipe-roundup-item Shortcode
Published 2024-05-02 · Modified
6.4EPSS 0.003
CVE-2023-6970
WP Recipe Maker <= 9.1.0 - Reflected Cross-Site Scripting via Referer
Published 2024-01-18 · Modified
6.1EPSS 0.007
CVE-2024-0380
WP Recipe Maker <= 9.1.0 - Directory Traversal
Published 2024-02-05 · Modified
5.4EPSS 0.008
CVE-2022-4468
WP Recipe Maker < 8.6.1 - Contributor+ Stored XSS
Published 2023-01-09 · Modified
5.4EPSS 0.005
CVE-2024-1571
WP Recipe Maker <= 9.2.1 - Authenticated Stored Cross-Site Scripting via Video Embed
Published 2024-04-09 · Modified
4.8EPSS 0.004