Extension WordPress
Vulnérabilités Recipe Cards For Your Food Blog from Zip Recipes
Cette page rassemble les failles publiées pour Recipe Cards For Your Food Blog from Zip Recipes, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Recipe Cards For Your Food Blog from Zip Recipes
5 fiches
Recipe Cards For Your Food Blog from Zip Recipes <= 8.2.7 – Authenticated (Contributor+) SQL Injection
The Recipe Cards For Your Food Blog from Zip Recipes plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 8.2.7 due to insufficient escaping on the user supplied parameter and lack of sufficient…
*-8.2.7
8.2.8
26/06/2026
Recipe Maker For Your Food Blog from Zip Recipes <= 8.1.0 – Authenticated(Contributor+) SQL Injection
The Recipe Maker For Your Food Blog from Zip Recipes plugin for WordPress is vulnerable to SQL Injection via the ‘order’ and 'orderby' parameters in all versions up to 8.1.1 (exclusive) due to insufficient escaping on the user…
[*, 8.1.1)
8.1.1
29/12/2023
Recipe Maker For Your Food Blog from Zip Recipes <= 8.0.7 – Cross-Site Request Forgery
The Recipe Maker For Your Food Blog from Zip Recipes plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 8.0.7. This is due to missing or incorrect nonce validation on mutiple actions.…
*-8.0.7
8.0.8
15/06/2023
Zip Recipes <= 8.0.7 – Cross-Site Request Forgery
The Zip Recipes plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 8.0.7. This is due to missing nonce validation in the ~/RecipeTable/edit.php file and the zrdn_clear_image() and zrdn_process_update_recipe() functions. This makes…
[*, 8.0.8)
8.0.8
15/06/2023
Zip Recipes <= 8.0.6 – Reflected Cross-Site Scripting via 's' parameter
The Zip Recipes plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in versions up to, and including, 8.0.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers…
[*, 8.0.7)
8.0.7
24/04/2023
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.