CVE-2026-89274

WP Recipe Maker for WordPress (all versions ≤ 10.8.1) is vulnerable to unauthenticated arbitrary shortcode execution via recipe comment content. The root cause lies in WPRM_Metadata::sanitize_metadata(), which recursively calls do_shortcode() on every scalar metadata field — including reviewBody,...

EUVD-2026-83476

The WP Recipe Maker plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in all versions up to, and including, 10.8.1. The vulnerability exists because WPRMMetadata::sanitizemetadata recursively calls doshortcode on every scalar field of the recipe's structured metadata array —...

WordPress WP Recipe Maker plugin <= 10.8.1 - Unauthenticated Arbitrary Shortcode Execution via Recipe Comment Content vulnerability

Unauthenticated Arbitrary Shortcode Execution via Recipe Comment Content vulnerability discovered by Md. Moniruzzaman Prodhan NomanProdhan - Knight Squad in WordPress Plugin WP Recipe Maker versions = 10.8.1...

CVE-2026-90884

The WP Recipe Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'notes' parameter in all versions up to, and including, 10.8.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acces...

CVE-2026-90884

The WP Recipe Maker WordPress plugin (versions ≤ 10.8.1 ) is affected by a Stored Cross-Site Scripting (XSS) vulnerability in the 'notes' parameter , accessed via the REST Preview Endpoint . The root cause is insufficient input sanitization and output escaping. An authenticated attacker with Cont...

EUVD-2026-82853

The WP Recipe Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'notes' parameter in all versions up to, and including, 10.8.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acces...

CVE-2026-90884 WP Recipe Maker <= 10.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'notes' Parameter via REST Preview Endpoint

The WP Recipe Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'notes' parameter in all versions up to, and including, 10.8.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acces...

recipe-blog-encoding

recipe-blog-encoding !WARNING 이 프로젝트는 전적으로 vibe-coding 으로 작성되었으며 아마도 이 저장소에서 부분적으로 표절되었습니다, 작성자는 아이디어가 재미있다고 생각한 바보입니다. SEO 게임 레시피 서문을 사용하여 비밀 메시지를 인코딩하는 도구입니다 사실 프롬프트는 무엇이든 될 수 있으며, 공유 프롬프트는 인코더와 디코더가 동의하는 키일 뿐입니다. 신경 언어 스테가노그래피를 사용하여 자연스러운 텍스트에 비밀 메시지를 숨깁니다. 작동 방식 1. 인코더는 비밀 메시지와 공유 프롬프트를 받습니다...

Masterchef

Masterchef Framework 👨‍🍳 Самый вкусный инструмент для пентеста 👩‍🍳 В разработке... Masterchef — это графический инструмент для эксплуатации и проверки уязвимостей, который помогает разбить ваш рабочий процесс по тестированию на проникновение, создавая вкусные рецепты. Это идеальный инструмент для...

WordPress WP Recipe Maker plugin <= 10.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Saulo Rafael miquinho miquinho in WordPress Plugin WP Recipe Maker versions = 10.8.1...

google-osconfig-privesc

요약 googleosconfigagent 프로세스는 GoogleCloudPlatformhttps://github.com/GoogleCloudPlatform/osconfig의 구성 요소로, 각 VM에서 기본적으로 실행되는 도구입니다. 에이전트는 root로 실행되며 사용자가 제어할 수 있는 일부 서비스를 담당하며, OS confighttps://cloud.google.com/compute/docs/os-config-management를 포함합니다. 이는 Google의 폴링 기반 원하는 상태 구성의 일종입니다. 이 저장소는 제가...

CVE-2026-25991

CVE-2026-25991 PoC - Tandoor Recipes SSRF レシピインポート経由のSSRFの概念実証 開示情報: 元々は私が GHSA-j6xg-85mh-qqf7 を通じて報告しました ⚠️ 許可されたペネトレーションテスト/研究目的のみで使用してください。 脆弱性情報...

CVE-2026-25964

CVE-2026-25964 PoC - Tandoor Recipes 인증된 LFI 레시피 가져오기를 통한 인증된 로컬 파일 노출 PoC 공개: 원래 GHSA-6485-jr28-52xx를 통해 저에 의해 보고됨 ⚠️ 승인된 침투 테스트/연구 목적으로만 사용하세요. 취약점 정보...

CVE-2026-57127

PraisonAI is a multi-agent teams system. Prior to 4.6.58, recipe serve installs APIKeyAuthMiddleware or JWTAuthMiddleware when an operator selects api-key or JWT authentication, but each middleware forwards requests when PRAISONAIAPIKEY or PRAISONAIJWTSECRET and the corresponding recipe value are...

CVE-2026-57127 praisonai: recipe serve auth middleware silently disables itself when no secret is set

PraisonAI is a multi-agent teams system. Prior to 4.6.58, recipe serve installs APIKeyAuthMiddleware or JWTAuthMiddleware when an operator selects api-key or JWT authentication, but each middleware forwards requests when PRAISONAIAPIKEY or PRAISONAIJWTSECRET and the corresponding recipe value are...

CVE-2026-57127

PraisonAI (multi-agent LLM framework on PyPI) prior to 4.6.58 contains a fail-open authentication bypass in praisonai/recipe/serve.py. When an operator sets auth: api-key or auth: jwt in the recipe YAML but fails to provide the corresponding secret (via YAML field or PRAISONAI_API_KEY / PRAISONAI...

CVE-2026-57127 praisonai: recipe serve auth middleware silently disables itself when no secret is set

PraisonAI is a multi-agent teams system. Prior to 4.6.58, recipe serve installs APIKeyAuthMiddleware or JWTAuthMiddleware when an operator selects api-key or JWT authentication, but each middleware forwards requests when PRAISONAIAPIKEY or PRAISONAIJWTSECRET and the corresponding recipe value are...

CVE-2025-56795

CVE-2025-56795 설명 Mealie의 레시피 생성 기능에서 두 개의 저장형 교차 사이트 스크립팅XSS 취약점이 발견되었습니다. 이는 버전 3.0.1 까지의 모든 버전에 영향을 미칩니다. 레시피 생성 시 제공된 무결성 검사가 되지 않은 사용자 입력이 저장되고, 이후 프론트엔드에서 적절한 이스케이프 없이 렌더링되어 지속형 XSS가 발생합니다. 영향을 받는 필드 새 레시피를 생성할 때 다음 필드가 취약합니다: 1. 재료 메모 note 매개변수: 이 필드에 입력된 값은 저장된 후 레시피 상세 보기에서 렌더링되어, 주입된...

CVE-2026-75905

The WP Recipe Maker plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 10.8.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with contributor-level...

CVE-2026-75905

The WP Recipe Maker WordPress plugin (versions ≤ 10.8.0 ) has an authorization bypass in class-wprm-recipe-saver.php, where the plugin fails to properly verify user authorization before performing actions. Authenticated attackers with contributor-level access or higher can take ownership of any a...