Missing Authorization in WPZOOM Recipe Card Blocks for Gutenberg & Elementor
CVE-2025-26983

4.3MEDIUM

Key Information:

Vendor

WordPress
Status
Recipe Card Blocks For Gutenberg & Elementor
Vendor
CVE Published:
25 February 2025

What is CVE-2025-26983?

A vulnerability exists in WPZOOM Recipe Card Blocks for Gutenberg and Elementor due to missing authorization mechanisms. This flaw allows attackers to exploit incorrectly configured access control security levels, potentially enabling unauthorized access to sensitive functionality within the plugin. Affected versions include those up to 3.4.3, which may lead to serious security breaches if not addressed by implementing proper access controls.

Affected Version(s)

Recipe Card Blocks for Gutenberg & Elementor <= 3.4.3

References

https://patchstack.com/database/wordpress/plugin/recipe-c...
vdb-entry

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Prissy (Patchstack Alliance)
.