CVE-2026-75905

The WP Recipe Maker plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 10.8.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with contributor-level access and above, to take ownership of any admin-authored recipe by rewriting its post_author to the attacker's user ID, and unpublish it by overwriting its post_status with the contributor's draft or pending post status. This requires the default 'recipe_use_author' setting to be set to 'parent' for the ownership transfer to occur, though unpublishing remains possible regardless of this setting.

• CWE-862

• https://plugins.trac.wordpress.org/browser/wp-recipe-maker/tags/10.8.0/includes/public/class-wprm-recipe-saver.php#L572
• https://plugins.trac.wordpress.org/browser/wp-recipe-maker/tags/10.8.0/includes/public/class-wprm-recipe-saver.php#L630
• https://plugins.trac.wordpress.org/browser/wp-recipe-maker/tags/10.8.0/includes/public/class-wprm-recipe-saver.php#L729
• https://plugins.trac.wordpress.org/changeset?reponame=&old=3677870%40wp-recipe-maker&new=3677870%40wp-recipe-maker
• https://www.wordfence.com/threat-intel/vulnerabilities/id/eee25825-2308-4234-b72b-6cb11b658a6e?source=cve

Published

Sep 9, 2026

Last Modified

Sep 9, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-75897Improper input validation in the capabilities route handler …7.5
• CVE-2026-75898RAGFlow before 0.26.3 contains a server-side request forgery…8.5
• CVE-2026-75899fast-uri is a URI parser for Node.js. It decodes percent esc…7.5
• CVE-2026-7590A vulnerability was identified in eyal-gor p_69_branch_monke…7.3
• CVE-2026-75900An out-of-bounds read vulnerability was found in swtpm's SWT…6.1
• CVE-2026-75904libmodplug through 0.8.9.1 contains an out-of-bounds read in…3.3
• CVE-2026-75908The Newsletters plugin for WordPress is vulnerable to author…4.3
• CVE-2026-7591A security flaw has been discovered in TimBroddin astro-mcp-…6.3
• CVE-2026-75910Incorrect privilege assignment in the ClickHouse connector d…6.5
• CVE-2026-75911CodeWhale versions before 0.8.64 fail to properly validate t…7.8
• CVE-2026-75912CodeWhale versions before 0.8.64 contain an argument injecti…7.4
• CVE-2026-75913CodeWhale (codewhale / codewhale-tui) versions >= 0.8.41 and…9.3