WP Recipe Maker

Explore WP Recipe Maker vulnerabilities across all versions. Currently tracking 20 known vulnerabilities, including severity, impact, and patch status.

01234567891007.09.2016Today19.12.20226.4WP Recipe Maker <= 8.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVSS 6.4 · 19.12.202217.01.20246.4WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Recipe Notes CVSS 6.4 · 17.01.20246.4WP Recipe Maker <= 9.1.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode CVSS 6.4 · 17.01.20246.4WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tag' CVSS 6.4 · 17.01.20246.4WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via icon_color CVSS 6.4 · 17.01.20245.4WP Recipe Maker <= 9.1.0 - Directory Traversal CVSS 5.4 · 17.01.20246.1WP Recipe Maker <= 9.1.0 - Reflected Cross-Site Scripting via Referer CVSS 6.1 · 17.01.20246.4WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via header_tag CVSS 6.4 · 17.01.202407.02.20248.8WP Recipe Maker <= 9.1.2 - Missing Authorization to Authenticated (Subscriber+) SQL Injecton CVSS 8.8 · 07.02.202414.03.20244.4WP Recipe Maker <= 9.2.1 - Authenticated Stored Cross-Site Scripting via Video Embed CVSS 4.4 · 14.03.202401.05.20246.4WP Recipe Maker <= 9.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wprm-recipe-roundup-item Shortcode CVSS 6.4 · 01.05.202418.06.20246.4WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'group_tag' CVSS 6.4 · 18.06.202423.10.20246.5WP Recipe Maker <= 9.6.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'tooltip' CVSS 6.5 · 23.10.202412.03.20256.4WP Recipe Maker <= 9.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 12.03.202526.09.20255.3WP Recipe Maker < 10.1.0 - Unauthenticated Arbitrary Shortcode Execution CVSS 5.3 · 26.09.202511.12.20254.3WP Recipe Maker <= 10.2.2 - Insecure Direct Object Reference to Sensitive Information Exposure CVSS 4.3 · 11.12.202516.12.20256.4WP Recipe Maker <= 10.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVSS 6.4 · 16.12.202528.01.20264.3Recipe Maker <= 10.2.4 - Missing Authorization CVSS 4.3 · 28.01.202624.02.20264.3WP Recipe Maker <= 10.6.0 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure CVSS 4.3 · 24.02.202626.02.20265.3WP Recipe Maker <= 10.3.2 - Insecure Direct Object Reference to Unauthenticated Arbitrary Post Metadata Modification via 'recipeId' Parameter CVSS 5.3 · 26.02.2026

Strategic Overview

Avg CVSSMedium
5.9/ 10
Patch Coverage100%
Open

0

Fixed

20

Get automatic notifications for all WP Recipe Maker vulnerabilities before they are exploited.

Vulnerability Records

20 records
2026-02-26 15:59CVE-2026-1558
5.3
Medium
Quốc Huy (jtwings)Yes
2026-02-24 21:09CVE-2025-14742
4.3
Medium
Abhinav Jaswal (wrath_exe)Yes
2026-01-28 00:00CVE-2026-24357
4.3
Medium
darooYes
2025-12-16 15:58CVE-2025-14385
6.4
Medium
Abhinav Jaswal (wrath_exe)Yes
2025-12-11 20:23CVE-2025-15527
4.3
Medium
Dmitrii IgnatyevYes
2025-09-26 00:00CVE-2025-62897
5.3
Medium
Najib SinjariYes
2025-03-12 00:00CVE-2025-1503
6.4
Medium
zer0gh0stYes
2024-10-23 00:00CVE-2024-9650
6.5
Medium
WebbernautYes
2024-06-18 00:00CVE-2024-0383
6.4
Medium
wesley (wcraft)Yes
2024-05-01 00:00CVE-2024-3490
6.4
Medium
stealthcopterYes
Showing 1–10 of 20 reports
WP Recipe Maker banner
Latestv10.7.1

WP Recipe Maker

Brecht

Author

Brecht

5.0(353)
100/100
Last Updated
2026-07-09 (20d ago)
Active Installs
50,000+
Downloads
3,846,565
Requires WP
4.4+
Requires PHP
7.2+
Tested up to
WP 7.0.2
Created
2016-09-07 (10y ago)

WP Recipe Maker is the easy recipe plugin that everyone can use. An easy workflow allows you to add recipes to any post or page with automatic JSON-LD metadata for your recipes. This metadata will improve your SEO and get you more visitors! Would you like to see the plugin in action before installing it? We have a WP Recipe Maker demo website showcasing all of the features! Get the most out of this plugin! Join the WP Recipe Maker Email Course and we’ll help you get started and learn all the tips and trick for using WPRM. Features An overview of WP Recipe Maker features: Compatible with both the Classic Editor and new Gutenberg editor Includes an Elementor block and shortcode can be used in other page builders Easy workflow to add recipes to any post or page Uses schema.org/Recipe JSON-LD metadata optimised for Google Recipe search Uses schema.org/How-to JSON-LD metadata optimised for non-food recipes and instructions Supports both regular and Guided Recipes for Google metadata Shoppable ingredients with Instacart, Walmart, Chicory, … Google AMP compatible Integrates recipe metadata with Yoast SEO and Rank Math schema graph Option to disable metadata per recipe if you want to publish non-food or DIY recipes Compatible with Pinterest Rich Pins and a setting to easily opt out Outputs ItemList metadata for Recipe Roundup posts Associate ingredients with instructions to have them show up exactly where needed Keyboard accessible and AMP compatible ratings for comments Interactive print recipe page with room for ads and optional credit to your website Fallback recipe shows up when the plugin is disabled Include a recipe video in the template and metadata Add photos or videos to any step of the recipe Print recipe and jump to recipe shortcodes Temperature shortcode with oven symbols This plugin is fully responsive, your recipes will look good on any device Easily change the look and feel to fit your website in the Template Editor Structure your ingredients and instructions in groups (e.g. icing and cake batter) Full text search for your recipes Access your recipes through the WordPress REST API Built-in SEO check for your recipe metadata Compatible with RTL languages Import your recipes from other plugins (see below) WP Recipe Maker Premium Looking for some more advanced functionality? We also have the WP Recipe Maker Premium add-on available with the following features: Use ingredient links for linking to products or other recipes Adjustable servings make it easy for your visitors Display all nutrition data in a nutrition label User Ratings make it easier for visitors to vote Add a mobile-friendly kitchen timer to your recipes More Premium templates for a unique recipe template Create custom recipe taxonomies like price level, difficulty, … Use checkboxes for your ingredients and instructions Import recipes from the Paprika app Even more add-ons can add the following functionality: Integration with a Nutrition API for automatic nutrition facts Unit Conversion to reach an international audience with a different unit system Have your users send in recipes through the Recipe Submission form Give your visitors the power of Recipe Collections for favourites, meal planning and more Import Options Currently using another recipe plugin? No problem! You can easily migrate all your existing recipes to WP Recipe Maker if you’re using any of the following plugins: Tasty Recipes WP Delicious Create by Mediavine EasyRecipe WP Ultimate Recipe Recipe Card Blocks by WPZOOM Meal Planner Pro BigOven ZipList and Zip Recipes Yummly Yumprint Recipe Card FoodiePress Cooked Cookbook Simple Recipe Pro Purr Recipe Plugin Recipes by Simmer WordPress.com shortcode JSON-LD HTML Script Recipes Generator (JSON-LD embed code only) Multi Rating (ratings only) (Need anything else? Just ask!) This plugin is in active development. Feel free to contact us with any feature requests or ideas.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C