Zip Recipes Vulnerabilities

The Recipe Cards For Your Food Blog from Zip Recipes plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 8.2.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, w...

CVSS:

6.5

Affected:

up to 8.2.7

Fixed in:

8.2.8

Disclosed:

Jun 26, 2026

CVE-2026-57663 on NVD →

Affected:

up to 8.2.6

Fix:

No patched version reported

Disclosed:

Aug 13, 2024

CVE-2024-38688 on NVD →

[en] Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Really Simple Plugins Recipe Maker For Your Food Blog from Zip Recipes.This issue affects Recipe Maker For Your Food Blog from Zip Recipes: from n/a through 8.1.0.

Affected:

up to 8.1.1

Fixed in:

8.1.1

Disclosed:

Dec 31, 2023

CVE-2023-52180 on NVD →

The Recipe Maker For Your Food Blog from Zip Recipes plugin for WordPress is vulnerable to SQL Injection via the ‘order’ and 'orderby' parameters in all versions up to 8.1.1 (exclusive) due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes...

CVSS:

8.8

Affected:

up to 8.1.1

Fixed in:

8.1.1

Disclosed:

Dec 29, 2023

CVE-2023-52180 on NVD →

[en] Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Really Simple Plugins Recipe Maker For Your Food Blog from Zip Recipes plugin <= 8.0.6 versions.

Affected:

up to 8.0.7

Fixed in:

8.0.7

Disclosed:

Aug 17, 2023

CVE-2023-31076 on NVD →

[en] Cross-Site Request Forgery (CSRF) vulnerability in Really Simple Plugins Recipe Maker For Your Food Blog from Zip Recipes plugin <= 8.0.7 versions.

Affected:

up to 8.0.8

Fixed in:

8.0.8

Disclosed:

Jul 17, 2023

CVE-2023-35089 on NVD →

The Zip Recipes plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 8.0.7. This is due to missing nonce validation in the ~/RecipeTable/edit.php file and the zrdn_clear_image() and zrdn_process_update_recipe() functions. This makes it possible for unauthenticated attackers...

CVSS:

4.3

Affected:

up to 8.0.8

Fixed in:

8.0.8

Disclosed:

Jun 15, 2023

The Recipe Maker For Your Food Blog from Zip Recipes plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 8.0.7. This is due to missing or incorrect nonce validation on mutiple actions. This makes it possible for unauthenticated attackers to perform unauthorized actions via...

CVSS:

4.3

Affected:

up to 8.0.7

Fixed in:

8.0.8

Disclosed:

Jun 15, 2023

CVE-2023-35089 on NVD →

The Zip Recipes plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 8.0.7. This is due to missing nonce validation in the ~/RecipeTable/edit.php file and the zrdn_clear_image() and zrdn_process_update_recipe() functions. This makes it possible for unauthenticated attackers...

Affected:

up to 8.0.8

Fixed in:

8.0.8

Disclosed:

Jun 15, 2023

The Zip Recipes plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in versions up to, and including, 8.0.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if the...

CVSS:

6.1

Affected:

up to 8.0.7

Fixed in:

8.0.7

Disclosed:

Apr 24, 2023

CVE-2023-31076 on NVD →

The Zip Recipes plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in versions up to, and including, 8.0.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if the...

Affected:

up to 8.0.7

Fixed in:

8.0.7

Disclosed:

Apr 24, 2023