CVE-2025-62897 - WordPress WP Recipe Maker plugin < 10.1.0 - Content Injection vulnerability

Back Back to CVE browser

MEDIUM

WordPress WP Recipe Maker plugin < 10.1.0 - Content Injection vulnerability

Published Oct 27, 2025

5.3

MEDIUM

CVSS 3.1

EPSS 0.30%

Description

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Brecht WP Recipe Maker wp-recipe-maker allows Code Injection.This issue affects WP Recipe Maker: from n/a through < 10.1.0.

Affected products

Vendor Brecht Product WP Recipe Maker Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <=10.1.0

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Brecht

WP Recipe Maker

unaffected

Version	Status	Constraints
0	affected	<=10.1.0

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-80

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-36041		Advisory
https://patchstack.com/database/Wordpress/Plugin/wp-recipe-maker/vulnerability/wordpress-wp-recipe-maker-plugin-10-1-1-content-injection-vulnerability?_s_id=cve		vdb-entry