agentprime: brechtvds-wp-recipe-makerEvery new CVE for brechtvds-wp-recipe-maker.https://agentprime.io/CVE-2026-89274: WP Recipe Maker <= 10.8.1 - Unauthenticated Arbitrary Shortcode Execution via Recipe Comment Contenthttps://agentprime.io/advisories/CVE-2026-89274/https://agentprime.io/advisories/CVE-2026-89274/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sat, 19 Sep 2026 02:27:11 GMTCVEcriticalCVE-2026-90884: WP Recipe Maker <= 10.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'notes' Parameter via REST Preview Endpointhttps://agentprime.io/advisories/CVE-2026-90884/https://agentprime.io/advisories/CVE-2026-90884/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 09:28:00 GMTCVECVE-2026-75905: WP Recipe Maker <= 10.8.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Recipe Ownership Takeover and Unpublishing via '[wprm-recipe]' Shortcodehttps://agentprime.io/advisories/CVE-2026-75905/https://agentprime.io/advisories/CVE-2026-75905/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 09 Sep 2026 05:31:05 GMTCVECVE-2026-1558: WP Recipe Maker <= 10.3.2 - Insecure Direct Object Reference to Unauthenticated Arbitrary Post Metadata Modification via 'recipeId' Parameterhttps://agentprime.io/advisories/CVE-2026-1558/https://agentprime.io/advisories/CVE-2026-1558/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Feb 2026 04:33:03 GMTCVECVE-2025-14742: WP Recipe Maker <= 10.2.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposurehttps://agentprime.io/advisories/CVE-2025-14742/https://agentprime.io/advisories/CVE-2025-14742/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 25 Feb 2026 09:26:50 GMTCVECVE-2025-15527: WP Recipe Maker <= 10.2.2 - Insecure Direct Object Reference to Sensitive Information Exposurehttps://agentprime.io/advisories/CVE-2025-15527/https://agentprime.io/advisories/CVE-2025-15527/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Jan 2026 04:44:33 GMTCVECVE-2025-14385: WP Recipe Maker <= 10.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodehttps://agentprime.io/advisories/CVE-2025-14385/https://agentprime.io/advisories/CVE-2025-14385/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 17 Dec 2025 04:31:31 GMTCVECVE-2025-1503: WP Recipe Maker <= 9.8.0 - Authenticated (Contributor+) Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2025-1503/https://agentprime.io/advisories/CVE-2025-1503/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Mar 2025 04:21:05 GMTCVECVE-2024-9650: WP Recipe Maker <= 9.6.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'tooltip'https://agentprime.io/advisories/CVE-2024-9650/https://agentprime.io/advisories/CVE-2024-9650/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Oct 2024 11:03:15 GMTCVECVE-2024-0383: WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'group_tag'https://agentprime.io/advisories/CVE-2024-0383/https://agentprime.io/advisories/CVE-2024-0383/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Jun 2024 08:33:56 GMTCVECVE-2024-3490: WP Recipe Maker <= 9.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wprm-recipe-roundup-item Shortcodehttps://agentprime.io/advisories/CVE-2024-3490/https://agentprime.io/advisories/CVE-2024-3490/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 May 2024 06:51:32 GMTCVECVE-2024-1571: WP Recipe Maker <= 9.2.1 - Authenticated Stored Cross-Site Scripting via Video Embedhttps://agentprime.io/advisories/CVE-2024-1571/https://agentprime.io/advisories/CVE-2024-1571/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Apr 2024 18:58:54 GMTCVECVE-2024-1206: WP Recipe Maker <= 9.1.2 - Missing Authorization to Authenticated (Subscriber+) SQL Injectonhttps://agentprime.io/advisories/CVE-2024-1206/https://agentprime.io/advisories/CVE-2024-1206/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Feb 2024 18:56:41 GMTCVECVE-2024-0384: WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Recipe Noteshttps://agentprime.io/advisories/CVE-2024-0384/https://agentprime.io/advisories/CVE-2024-0384/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Feb 2024 21:21:49 GMTCVECVE-2024-0255: WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via icon_colorhttps://agentprime.io/advisories/CVE-2024-0255/https://agentprime.io/advisories/CVE-2024-0255/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Feb 2024 21:21:44 GMTCVECVE-2024-0380: WP Recipe Maker <= 9.1.0 - Directory Traversalhttps://agentprime.io/advisories/CVE-2024-0380/https://agentprime.io/advisories/CVE-2024-0380/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Feb 2024 21:21:42 GMTCVECVE-2024-0382: WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via header_taghttps://agentprime.io/advisories/CVE-2024-0382/https://agentprime.io/advisories/CVE-2024-0382/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Feb 2024 21:21:36 GMTCVECVE-2023-6958: WP Recipe Maker <= 9.1.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcodehttps://agentprime.io/advisories/CVE-2023-6958/https://agentprime.io/advisories/CVE-2023-6958/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Jan 2024 07:30:25 GMTCVECVE-2024-0381: WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tag'https://agentprime.io/advisories/CVE-2024-0381/https://agentprime.io/advisories/CVE-2024-0381/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Jan 2024 07:30:25 GMTCVECVE-2023-6970: WP Recipe Maker <= 9.1.0 - Reflected Cross-Site Scripting via Refererhttps://agentprime.io/advisories/CVE-2023-6970/https://agentprime.io/advisories/CVE-2023-6970/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Jan 2024 07:30:24 GMTCVE