CVE-2026-89274 | CVSS: 9.1 | 严重级别: CRITICAL
The WP Recipe Maker plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in all versions up to, and including, 10.8.1. The vulnerability exists because `WPRM_Metadata::sanitize_metadata()` recursively calls `do_shortcode()` on every scalar field of the recipe's structured metadata array — including the `reviewBody` field, which is populated verbatim from the `comment_content` of approved `wprm-comment-rating` comments — without sanitizing or stripping shortcode tokens before execution; the subsequent `wp_strip_all_tags()` and `strip_shortcodes()` calls operate only on the output
参考链接:
• https://plugins.trac.wordpress.org/browser/wp-recipe-maker/tags/10.8.1/includes/
• https://plugins.trac.wordpress.org/browser/wp-recipe-maker/tags/10.8.1/includes/
• https://plugins.trac.wordpress.org/browser/wp-recipe-maker/tags/10.8.1/includes/
📌 数据来源: NVD 官方