Tag

Cve-2026-89274

1 brief RSS

Arbitrary Shortcode Execution in WP Recipe Maker Plugin

The WP Recipe Maker plugin for WordPress (<= 10.8.1) is vulnerable to arbitrary shortcode execution due to recursive do_shortcode calls on user-supplied metadata fields.

WP Recipe Maker web-vulnerability wordpress cve-2026-89274

1t 1c 10h ago