CVEs we hold for Brechtvds
Records whose assigning authority named Brechtvds as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-90884WP Recipe Maker <= 10.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'notes' Parameter via REST…brechtvds WP Recipe Maker
CVE-2026-9019Easy Image Collage <= 1.13.6 - Authenticated (Author+) Stored Cross-Site Scripting via 'grid[properties][borderColor]'…brechtvds Easy Image Collage
CVE-2026-89274WP Recipe Maker <= 10.8.1 - Unauthenticated Arbitrary Shortcode Execution via Recipe Comment Contentbrechtvds WP Recipe Maker
CVE-2026-75905WP Recipe Maker <= 10.8.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Recipe Ownership Takeover…brechtvds WP Recipe Maker
CVE-2026-1558WP Recipe Maker <= 10.3.2 - Insecure Direct Object Reference to Unauthenticated Arbitrary Post Metadata Modification…brechtvds WP Recipe Maker
CVE-2026-1268Dynamic Widget Content <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Content Fieldbrechtvds Dynamic Widget Content
CVE-2025-15527WP Recipe Maker <= 10.2.2 - Insecure Direct Object Reference to Sensitive Information Exposurebrechtvds WP Recipe Maker
CVE-2025-1503WP Recipe Maker <= 9.8.0 - Authenticated (Contributor+) Stored Cross-Site Scriptingbrechtvds WP Recipe Maker
CVE-2025-14742WP Recipe Maker <= 10.2.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposurebrechtvds WP Recipe Maker
CVE-2025-14385WP Recipe Maker <= 10.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodebrechtvds WP Recipe Maker
CVE-2025-11987Visual Link Preview <= 2.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via visual-link-preview…brechtvds Visual Link Preview
CVE-2024-9650WP Recipe Maker <= 9.6.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'tooltip'brechtvds WP Recipe Maker
CVE-2024-9051WP Ultimate Post Grid <= 3.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpupg-grid-with-filters…brechtvds WP Ultimate Post Grid
CVE-2024-5864Easy Affiliate Links <= 3.7.3 - Missing Authorization to Authenticated (Subscriber+) Settings Resetbrechtvds Easy Affiliate Links
CVE-2024-5863Easy Image Collage <= 1.13.5 - Missing Authorization to Authenticated (Contributor+) Data Clearancebrechtvds Easy Image Collage
CVE-2024-4043WP Ultimate Post Grid <= 3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpupg-text Shortcodebrechtvds WP Ultimate Post Grid
CVE-2024-3490WP Recipe Maker <= 9.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wprm-recipe-roundup-item…brechtvds WP Recipe Maker
CVE-2024-1571WP Recipe Maker <= 9.2.1 - Authenticated Stored Cross-Site Scripting via Video Embedbrechtvds WP Recipe Maker
CVE-2024-12825Custom Related Posts <= 1.7.3 - Missing Authorization to Authenticated (Subscriber+) Private Post Search and Relation…brechtvds Custom Related Posts
CVE-2024-1206WP Recipe Maker <= 9.1.2 - Missing Authorization to Authenticated (Subscriber+) SQL Injectonbrechtvds WP Recipe Maker
CVE-2024-0384WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Recipe Notesbrechtvds WP Recipe Maker
CVE-2024-0383WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'group_tag'brechtvds WP Recipe Maker
CVE-2024-0382WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via header_tagbrechtvds WP Recipe Maker
CVE-2024-0381WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tag'brechtvds WP Recipe Maker
CVE-2024-0255WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via icon_colorbrechtvds WP Recipe Maker
CVE-2023-6970WP Recipe Maker <= 9.1.0 - Reflected Cross-Site Scripting via Refererbrechtvds WP Recipe Maker
CVE-2023-6958WP Recipe Maker <= 9.1.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcodebrechtvds WP Recipe Maker
28 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.