Brechtvds vulnerabilities
We track 2 vulnerabilities in Brechtvds products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 19, 2026.
2vulnerabilities
1critical
1high
0exploited
8.9average CVSS score
Latest Brechtvds vulnerabilities
- 9.1 Critical severity
WP Recipe Maker: Improper Control of Generation of Code
The WP Recipe Maker plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in all versions up to, and including, 10.8.1. The vulnerability exists because `WPRM_Metadata::sanitize_metadata()` recursively calls `do_shortcode()` on every scalar field
- 8.8 High severity
WP Recipe Maker: Improper Neutralization of Special Elements used in an SQL Command
The WP Recipe Maker plugin for WordPress is vulnerable to SQL Injection via the 'recipes' parameter in all versions up to, and including, 9.1.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL q