CVE-2026-75905

The WP Recipe Maker WordPress plugin (versions ≤ 10.8.0 ) has an authorization bypass in class-wprm-recipe-saver.php, where the plugin fails to properly verify user authorization before performing actions. Authenticated attackers with contributor-level access or higher can take ownership of any a...