Sql injection

🗓️ 29 Feb 2024 01:43:00Reported by PRIOn knowledge baseType

The WP Recipe Maker plugin for WordPress is vulnerable to SQL Injection via the 'recipes' parameter. Authenticated attackers with subscriber-level access can extract sensitive information from the database

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2024-1206	2 Mar 202411:41	–	circl
CNNVD	WordPress Plugin WP Recipe Maker Security Vulnerability	29 Feb 202400:00	–	cnnvd
CVE	CVE-2024-1206	20 Feb 202418:56	–	cve
Cvelist	CVE-2024-1206 WP Recipe Maker <= 9.1.2 - Missing Authorization to Authenticated (Subscriber+) SQL Injecton	20 Feb 202418:56	–	cvelist
EUVD	EUVD-2024-16973	3 Oct 202520:07	–	euvd
NVD	CVE-2024-1206	29 Feb 202401:43	–	nvd
Patchstack	WordPress WP Recipe Maker Plugin <= 9.1.2 is vulnerable to Broken Access Control	8 Feb 202400:00	–	patchstack
Positive Technologies	PT-2024-17421 · WordPress · Wp Recipe Maker	20 Feb 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-1206	5 Feb 202505:28	–	redhatcve
Vulnrichment	CVE-2024-1206	20 Feb 202418:56	–	vulnrichment

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/b10d8f8a-517f-4286-b501-0ca040529362
plugins	www.plugins.trac.wordpress.org/changeset/3032702/wp-recipe-maker/trunk/includes/admin/import/class-wprm-import-mealplannerpro.php
plugins	www.plugins.trac.wordpress.org/changeset/3032702/wp-recipe-maker/trunk/includes/admin/import/class-wprm-import-recipecard.php
plugins	www.plugins.trac.wordpress.org/changeset/3032702/wp-recipe-maker/trunk/includes/admin/import/class-wprm-import-wpzoom.php
plugins	www.plugins.trac.wordpress.org/changeset/3032702/wp-recipe-maker/trunk/includes/admin/import/class-wprm-import-wpzoomcpt.php
plugins	www.plugins.trac.wordpress.org/changeset/3032702/wp-recipe-maker/trunk/includes/admin/import/class-wprm-import-yummly.php
plugins	www.plugins.trac.wordpress.org/changeset/3032702/wp-recipe-maker/trunk/includes/admin/class-wprm-import-manager.php

29 Feb 2024 13:49Current

7.5High risk

Vulners AI Score7.5

EPSS0.00646