BR
Vendor
brechtvds
19
CVEs
0
On KEV
0
New 30D
Products
WR9.1
WP Recipe Maker
brechtvds
10 CVEs0 on KEV0 new
CR5.4
Custom Related Posts
brechtvds
2 CVEs0 on KEV0 new
EI6.4
Easy Image Collage
brechtvds
2 CVEs0 on KEV0 new
WU6.4
WP Ultimate Post Grid
brechtvds
2 CVEs0 on KEV0 new
DW6.4
Dynamic Widget Content
brechtvds
1 CVEs0 on KEV0 new
EA4.3
Easy Affiliate Links
brechtvds
1 CVEs0 on KEV0 new
VL6.4
Visual Link Preview
brechtvds
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-89274 | WR WP Recipe Maker brechtvds | 9.1 | Sep 19 | WP Recipe Maker <= 10.8.1 - Unauthenticated Arbitrary Shortcode Execution via Recipe Comment Content |
| CVE-2026-90884 | WR WP Recipe Maker brechtvds | 5.4 | Sep 18 | WP Recipe Maker <= 10.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'notes' Parameter via REST Preview Endpoint |
| CVE-2026-75905 | WR WP Recipe Maker brechtvds | 4.3 | Sep 9 | WP Recipe Maker <= 10.8.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Recipe Ownership Takeover and Unpublishing via '[wprm-recipe]' Shortcode |
| CVE-2026-9019 | EI Easy Image Collage brechtvds | 6.4 | Jun 10 | Easy Image Collage <= 1.13.6 - Authenticated (Author+) Stored Cross-Site Scripting via 'grid[properties][borderColor]' and 'grid[images][N][attachment_url]' Parameters |
| CVE-2026-1558 | WR WP Recipe Maker brechtvds | 5.3 | Feb 27 | WP Recipe Maker <= 10.3.2 - Insecure Direct Object Reference to Unauthenticated Arbitrary Post Metadata Modification via 'recipeId' Parameter |
| CVE-2025-14742 | WR WP Recipe Maker brechtvds | 4.3 | Feb 25 | WP Recipe Maker <= 10.2.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure |
| CVE-2026-1268 | DW Dynamic Widget Content brechtvds | 6.4 | Feb 5 | Dynamic Widget Content <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Content Field |
| CVE-2025-15527 | WR WP Recipe Maker brechtvds | 4.3 | Jan 16 | WP Recipe Maker <= 10.2.2 - Insecure Direct Object Reference to Sensitive Information Exposure |
| CVE-2025-14385 | WR WP Recipe Maker brechtvds | 6.4 | Dec 17 | WP Recipe Maker <= 10.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode |
| CVE-2025-11987 | VL Visual Link Preview brechtvds | 6.4 | Nov 5 | Visual Link Preview <= 2.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via visual-link-preview Shortcode |
| CVE-2025-46227 | CR Custom Related Posts Brechtvds | 5.4 | Apr 22 | WordPress Custom Related Posts plugin <= 1.7.4 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-1503 | WR WP Recipe Maker brechtvds | 6.4 | Mar 13 | WP Recipe Maker <= 9.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-12825 | CR Custom Related Posts brechtvds | 5.4 | Feb 1 | Custom Related Posts <= 1.7.3 - Missing Authorization to Authenticated (Subscriber+) Private Post Search and Relation Updates |
| CVE-2024-9650 | WR WP Recipe Maker brechtvds | 5.4 | Oct 24 | WP Recipe Maker <= 9.6.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'tooltip' |
| CVE-2024-9051 | WU WP Ultimate Post Grid brechtvds | 6.4 | Oct 11 | WP Ultimate Post Grid <= 3.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpupg-grid-with-filters Shortcode |
| CVE-2024-5864 | EA Easy Affiliate Links brechtvds | 4.3 | Jun 28 | Easy Affiliate Links <= 3.7.3 - Missing Authorization to Authenticated (Subscriber+) Settings Reset |
| CVE-2024-5863 | EI Easy Image Collage brechtvds | 5.4 | Jun 28 | Easy Image Collage <= 1.13.5 - Missing Authorization to Authenticated (Contributor+) Data Clearance |
| CVE-2024-0383 | WR WP Recipe Maker brechtvds | 5.4 | Jun 19 | WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'group_tag' |
| CVE-2024-4043 | WU WP Ultimate Post Grid brechtvds | 6.4 | May 23 | WP Ultimate Post Grid <= 3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpupg-text Shortcode |