Stored Cross-Site Scripting Vulnerability in WP Recipe Maker Plugin by WordPress

CVE-2025-1503

What is CVE-2025-1503?

The WP Recipe Maker plugin for WordPress has a vulnerability that allows authenticated attackers with Contributor-level permissions or higher to exploit the Roundup Recipe Name field. Due to inadequate input validation and output encoding, attackers can inject malicious web scripts. These scripts may execute when a user accesses a compromised page, posing a significant risk to website security and user data.

References