brechtvds vulnerabilities

CVEs per yearBy the year they were published

1. 202416
2. 20254
3. 20268

Newest CVEs

• CVE-2026-89274

  WP Recipe Maker <= 10.8.1 - Unauthenticated Arbitrary Shortcode Execution via Recipe Comment Content

  brechtvds · WP Recipe Maker

  Critical9.1
• CVE-2026-90884

  WP Recipe Maker <= 10.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'notes' Parameter via REST Preview Endpoint

  brechtvds · WP Recipe Maker

  Medium5.4
• CVE-2026-75905

  WP Recipe Maker <= 10.8.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Recipe Ownership Takeover and Unpublishing via '[wprm-recipe]' Shortcode

  brechtvds · WP Recipe Maker

  Medium4.3
• CVE-2026-9019

  Easy Image Collage <= 1.13.6 - Authenticated (Author+) Stored Cross-Site Scripting via 'grid[properties][borderColor]' and 'grid[images][N][attachment_url]' Parameters

  brechtvds · Easy Image Collage

  Medium6.4
• CVE-2026-1558

  WP Recipe Maker <= 10.3.2 - Insecure Direct Object Reference to Unauthenticated Arbitrary Post Metadata Modification via 'recipeId' Parameter

  brechtvds · WP Recipe Maker

  Medium5.3
• CVE-2025-14742

  WP Recipe Maker <= 10.2.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure

  brechtvds · WP Recipe Maker

  Medium4.3
• CVE-2026-1268

  Dynamic Widget Content <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Content Field

  brechtvds · Dynamic Widget Content

  Medium6.4
• CVE-2025-15527

  WP Recipe Maker <= 10.2.2 - Insecure Direct Object Reference to Sensitive Information Exposure

  brechtvds · WP Recipe Maker

  Medium4.3
• CVE-2025-14385

  WP Recipe Maker <= 10.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

  brechtvds · WP Recipe Maker

  Medium6.4
• CVE-2025-11987

  Visual Link Preview <= 2.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via visual-link-preview Shortcode

  brechtvds · Visual Link Preview

  Medium6.4