CVE Tools

Brechtvds

5 CVEs tracked since 2024. Since Feb 2024, none of them reached CISA KEV.

Brechtvds CVEs per month

Feb 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Brechtvds CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2024-0250
2024-034 or fewer
2024-044 or fewer
2024-055 or fewer
2024-064 or fewer
2024-074 or fewer
2024-084 or fewer
2024-093 or fewer
2024-104 or fewer
2024-114 or fewer
2024-123 or fewer
2025-014 or fewer
2025-023 or fewer
2025-035 or fewer
2025-044 or fewer
2025-054 or fewer
2025-064 or fewer
2025-075 or fewer
2025-084 or fewer
2025-094 or fewer
2025-104 or fewer
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-106 or fewer

Products

The products that kept showing up in Brechtvds's monthly top three, with their CVEs summed over those months.

  1. Wp Recipe Maker51 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Brechtvds.

  1. CVE-2026-89274WP Recipe Maker <= 10.8.1 - Unauthenticated Arbitrary Shortcode Execution via Recipe Comment Content9.1
  2. CVE-2026-90884WP Recipe Maker <= 10.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'notes' Parameter via REST Preview Endpoint5.4
  3. CVE-2026-75905WP Recipe Maker <= 10.8.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Recipe Ownership Takeover and Unpublishing via '[wprm-recipe]' Shortcode4.3
  4. CVE-2026-9019Easy Image Collage <= 1.13.6 - Authenticated (Author+) Stored Cross-Site Scripting via 'grid[properties][borderColor]' and 'grid[images][N][attachment_url]' Parameters6.4
  5. CVE-2026-1558WP Recipe Maker <= 10.3.2 - Insecure Direct Object Reference to Unauthenticated Arbitrary Post Metadata Modification via 'recipeId' Parameter5.3
  6. CVE-2025-14742WP Recipe Maker <= 10.2.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure4.3
  7. CVE-2026-1268Dynamic Widget Content <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Content Field6.4
  8. CVE-2025-15527WP Recipe Maker <= 10.2.2 - Insecure Direct Object Reference to Sensitive Information Exposure4.3
  9. CVE-2025-14385WP Recipe Maker <= 10.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4
  10. CVE-2025-11987Visual Link Preview <= 2.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via visual-link-preview Shortcode6.4
  11. CVE-2025-46227WordPress Custom Related Posts plugin <= 1.7.4 - Cross Site Scripting (XSS) Vulnerability6.5
  12. CVE-2025-1503WP Recipe Maker <= 9.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4
  13. CVE-2024-12825Custom Related Posts <= 1.7.3 - Missing Authorization to Authenticated (Subscriber+) Private Post Search and Relation Updates5.4
  14. CVE-2024-9650WP Recipe Maker <= 9.6.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'tooltip'6.5
  15. CVE-2024-9051WP Ultimate Post Grid <= 3.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpupg-grid-with-filters Shortcode6.4

The record

Peak rank
#136 in Feb 2024
Busiest month shown
Feb 2024, 5 CVEs
Months with a KEV entry
0 since Feb 2024
Monthly snapshots
1 since 2024
Brechtvds's full record, month by month