WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in WP Recipe Maker

The easy and user-friendly recipe plugin for everyone. Automatic JSON-LD metadata for food AND how-to recipes will improve your SEO!

20Reported vulnerabilities
8.8Highest CVSS score
10.8.0Latest version
50,000+Active installs

What to do now

Update WP Recipe Maker to 10.3.3 or later. 20 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 12, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2022-4468 Medium 5.4 0.5% Before 8.6.1 8.6.1 January 9, 2023
CVE-2024-1206 High 8.8 0.7% Before 9.2.0 9.2.0 February 29, 2024
CVE-2025-14385 Medium 6.4 0.3% 0 to 10.2.3 (inclusive) 10.2.4 December 17, 2025
CVE-2025-1503 Medium 6.4 0.2% 0 to 9.8.0 (inclusive) 9.8.1 March 13, 2025
CVE-2023-6970 Medium 6.1 0.7% 9.1.0 and earlier 9.1.1 January 18, 2024
CVE-2024-9650 Medium 5.4 0.4% 0 to 9.6.1 (inclusive)
0 to 9.6.1 (inclusive)		 9.7.0 October 24, 2024
CVE-2024-0383 Medium 5.4 0.4% Before 9.1.1 9.1.1 June 19, 2024
CVE-2024-3490 Medium 5.4 0.3% 0 to 9.3.1 (inclusive)
- to 9.3.1 (inclusive)		 9.4.0 May 2, 2024
CVE-2024-0384 Medium 5.4 0.6% 9.1.0 and earlier 9.1.1 February 5, 2024
CVE-2024-0382 Medium 5.4 0.6% 9.1.0 and earlier 9.1.1 February 5, 2024
CVE-2024-0255 Medium 5.4 0.5% 9.1.0 and earlier 9.1.1 February 5, 2024
CVE-2024-0381 Medium 5.4 0.6% 9.1.0 and earlier 9.1.1 January 18, 2024
CVE-2023-6958 Medium 5.4 0.3% 9.1.0 and earlier 9.1.1 January 18, 2024
CVE-2026-1558 Medium 5.3 0.3% 0 to 10.3.2 (inclusive) 10.3.3 February 27, 2026
CVE-2025-62897 Medium 5.3 0.3% Before 10.1.0 10.1.0 September 26, 2025
CVE-2024-1571 Medium 4.8 0.4% Before 9.3.0 9.3.0 April 9, 2024
CVE-2024-0380 Medium 4.3 0.8% 9.1.0 and earlier 9.1.1 February 5, 2024
CVE-2025-14742 Medium 4.3 0.2% 0 to 10.2.3 (inclusive) 10.6.1 February 25, 2026
CVE-2026-24357 Medium 4.3 0.2% 10.2.4 and earlier 10.3.0 January 28, 2026
CVE-2025-15527 Medium 4.3 0.3% 0 to 10.2.2 (inclusive) 10.2.3 January 16, 2026

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.