Vulnerabilities and security researches forrecipe-card-blocks-by-wpzoom recipe-card-blocks-by-wpzoom

Jun 06, 2024

CVE, Research URL: CVE-2021-24632
Home page URL: Security reports for Recipe Card Blocks for Gutenberg & Elementor – Best WordPress Recipe Plugin
Application: Recipe Card Blocks for Gutenberg & Elementor – Best WordPress Recipe Plugin
Date: Sep 27, 2021
Research Description: The Recipe Card Blocks by WPZOOM WordPress plugin before 2.8.1 does not escape the message parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting issue
Affected versions: Min -, max -.
Status: vulnerable

CVE, Research URL: CVE-2021-24634
Home page URL: Security reports for Recipe Card Blocks for Gutenberg & Elementor – Best WordPress Recipe Plugin
Application: Recipe Card Blocks for Gutenberg & Elementor – Best WordPress Recipe Plugin
Date: Sep 27, 2021
Research Description: The Recipe Card Blocks by WPZOOM WordPress plugin before 2.8.3 does not properly sanitise or escape some of the properties of the Recipe Card Block (such as ingredientsLayout, iconSet, steps, ingredients, recipeTitle, or settings), which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks.
Affected versions: Min -, max -.
Status: vulnerable

Aug 20, 2024

CVE, Research URL: CVE-2024-43293
Home page URL: Security reports for Recipe Card Blocks for Gutenberg & Elementor – Best WordPress Recipe Plugin
Application: Recipe Card Blocks for Gutenberg & Elementor – Best WordPress Recipe Plugin
Date: Nov 01, 2024
Research Description: Missing Authorization vulnerability in WPZOOM Recipe Card Blocks for Gutenberg & Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Recipe Card Blocks for Gutenberg & Elementor: from n/a through 3.3.1.
Affected versions: Min -, max -.
Status: vulnerable

Feb 27, 2025

CVE, Research URL: CVE-2025-26983
Home page URL: Security reports for Recipe Card Blocks for Gutenberg & Elementor – Best WordPress Recipe Plugin
Application: Recipe Card Blocks for Gutenberg & Elementor – Best WordPress Recipe Plugin
Date: Feb 25, 2025
Research Description: Missing Authorization vulnerability in WPZOOM Recipe Card Blocks for Gutenberg & Elementor allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Recipe Card Blocks for Gutenberg & Elementor: from n/a through 3.4.3.
Affected versions: Min -, max -.
Status: vulnerable