Threats Tagged 'ghsa-hxrm-g829-m3g6'
View all threats tagged with 'ghsa-hxrm-g829-m3g6'. Filter and sort to focus on specific types of threats.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-hxrm-g829-m3g6'
Click on any threat for detailed analysis and mitigation recommendations
CVE Database V5 · 09/09/2026, 05:31:05 UTC 0 The WP Recipe Maker plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 10.8.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with contributor-level access and above, to take ownership of any admin-authored recipe by rewriting its post_author to the attacker's user ID, and unpublish it by overwriting its post_status with the contributor's draft or pending post status. This requires the default 'recipe_use_author' setting to be set to 'parent' for the ownership transfer to occur, though unpublishing remains possible regardless of this setting. Join the discussion | CVE Database V5 | 09/09/2026, 05:31:05 UTC Added: 09/09/2026, 05:37:41 UTC |
Showing 1 to 1 of 1 result
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console → Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.