CVE-2025-14742

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-14742", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-12-15T19:09:55.527Z", "datePublished": "2026-02-25T09:26:50.441Z", "dateUpdated": "2026-04-08T16:36:07.011Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:36:07.011Z"}, "affected": [{"vendor": "brechtvds", "product": "WP Recipe Maker", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "10.2.3", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The WP Recipe Maker plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'ajax_search_recipes' and 'ajax_get_recipe' functions in all versions up to, and including, 10.2.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to retrieve sensitive recipe information including draft, pending, and private recipes that they shouldn't be able to access."}], "title": "WP Recipe Maker <= 10.2.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/10c17e74-dced-483e-bcaf-00ff5b11059c?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/wp-recipe-maker/trunk/includes/public/class-wprm-recipe-manager.php#L47"}, {"url": "https://plugins.trac.wordpress.org/browser/wp-recipe-maker/trunk/includes/public/class-wprm-recipe-manager.php#L46"}, {"url": "https://plugins.trac.wordpress.org/browser/wp-recipe-maker/trunk/includes/public/class-wprm-recipe-manager.php#L161"}, {"url": "https://plugins.trac.wordpress.org/browser/wp-recipe-maker/trunk/includes/public/class-wprm-recipe-manager.php#L301"}, {"url": "https://plugins.trac.wordpress.org/changeset/3440361/wp-recipe-maker/trunk/includes/public/class-wprm-recipe-manager.php"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-639 Authorization Bypass Through User-Controlled Key", "cweId": "CWE-639", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "baseScore": 4.3, "baseSeverity": "MEDIUM"}}], "credits": [{"lang": "en", "type": "finder", "value": "Abhinav Jaswal"}], "timeline": [{"time": "2025-12-15T19:25:38.000Z", "lang": "en", "value": "Vendor Notified"}, {"time": "2026-02-24T21:09:18.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-02-25T16:33:34.211437Z", "id": "CVE-2025-14742", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-25T16:33:45.643Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-14742", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-02-25T16:33:34.211437Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-25T16:33:40.972Z"}}], "cna": {"title": "WP Recipe Maker <= 10.2.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure", "credits": [{"lang": "en", "type": "finder", "value": "Abhinav Jaswal"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"}}], "affected": [{"vendor": "brechtvds", "product": "WP Recipe Maker", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "10.2.3"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-12-15T19:25:38.000Z", "value": "Vendor Notified"}, {"lang": "en", "time": "2026-02-24T21:09:18.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/10c17e74-dced-483e-bcaf-00ff5b11059c?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/wp-recipe-maker/trunk/includes/public/class-wprm-recipe-manager.php#L47"}, {"url": "https://plugins.trac.wordpress.org/browser/wp-recipe-maker/trunk/includes/public/class-wprm-recipe-manager.php#L46"}, {"url": "https://plugins.trac.wordpress.org/browser/wp-recipe-maker/trunk/includes/public/class-wprm-recipe-manager.php#L161"}, {"url": "https://plugins.trac.wordpress.org/browser/wp-recipe-maker/trunk/includes/public/class-wprm-recipe-manager.php#L301"}, {"url": "https://plugins.trac.wordpress.org/changeset/3440361/wp-recipe-maker/trunk/includes/public/class-wprm-recipe-manager.php"}], "descriptions": [{"lang": "en", "value": "The WP Recipe Maker plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'ajax_search_recipes' and 'ajax_get_recipe' functions in all versions up to, and including, 10.2.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to retrieve sensitive recipe information including draft, pending, and private recipes that they shouldn't be able to access."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-639", "description": "CWE-639 Authorization Bypass Through User-Controlled Key"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:36:07.011Z"}}}, "cveMetadata": {"cveId": "CVE-2025-14742", "state": "PUBLISHED", "dateUpdated": "2026-04-08T16:36:07.011Z", "dateReserved": "2025-12-15T19:09:55.527Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2026-02-25T09:26:50.441Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "WP Recipe Maker", "vendor": "brechtvds", "versions": [{"lessThanOrEqual": "10.2.3", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The WP Recipe Maker plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'ajax_search_recipes' and 'ajax_get_recipe' functions in all versions up to, and including, 10.2.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to retrieve sensitive recipe information including draft, pending, and private recipes that they shouldn't be able to access."}, {"lang": "es", "value": "El plugin WP Recipe Maker para WordPress es vulnerable a acceso no autorizado de datos debido a una falta de verificaci\u00f3n de capacidad en las funciones 'ajax_search_recipes' y 'ajax_get_recipe' en todas las versiones hasta, e incluyendo, la 10.2.3. Esto hace posible que atacantes autenticados, con acceso de nivel Suscriptor y superior, recuperen informaci\u00f3n sensible de recetas, incluyendo recetas borrador, pendientes y privadas a las que no deber\u00edan poder acceder."}], "id": "CVE-2025-14742", "lastModified": "2026-06-17T08:36:29.470", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-14742", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-02-25T16:33:34.211437Z", "version": "2.0.3"}}]}, "published": "2026-02-25T10:16:18.087", "references": [{"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/wp-recipe-maker/trunk/includes/public/class-wprm-recipe-manager.php#L161"}, {"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/wp-recipe-maker/trunk/includes/public/class-wprm-recipe-manager.php#L301"}, {"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/wp-recipe-maker/trunk/includes/public/class-wprm-recipe-manager.php#L46"}, {"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/wp-recipe-maker/trunk/includes/public/class-wprm-recipe-manager.php#L47"}, {"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/changeset/3440361/wp-recipe-maker/trunk/includes/public/class-wprm-recipe-manager.php"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/10c17e74-dced-483e-bcaf-00ff5b11059c?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-639"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,10.2.3]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "WP Recipe Maker", "source": "cna", "vendor": "brechtvds"}, "product": "wp_recipe_maker", "vendor": "brechtvds"}, {"configurations": [{"platform": null, "status": "unaffected", "versions": null}], "enrichment": {"confidence": 80.0, "confidence_source": "inferred", "scores": [{"score": 80.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "product": "wordpress", "vendor": "wordpress"}], "analysis": {"en": {"generated_at": "2026-04-27T20:07:00.986061+00:00", "value": {"mitigation_remediation": ["Upgrade the WP Recipe Maker plugin to the latest official release, which includes the missing capability checks for the affected AJAX endpoints.", "If an upgrade is not immediately possible, temporarily block the 'ajax_search_recipes' and 'ajax_get_recipe' endpoints by modifying the plugin code or using a security plugin that restricts these AJAX actions for unauthorized users.", "Audit existing recipe entries for drafts, pending, or private status that may have been exposed to Subscriber accounts, and adjust their visibility settings to enforce proper access controls."], "summary": {"action": "Patch Update", "impact": "Sensitive information exposure"}, "threat_synthesis": {"affected_systems": "WordPress sites running the WP Recipe Maker plugin in any version up to and including 10.2.3 are vulnerable. The issue resides in the plugin\u2019s core code that handles AJAX recipe lookup and retrieval; it is independent of the site\u2019s WordPress core or theme configuration. Authenticated users with Subscriber or higher roles are able to breach the access controls, while anonymous visitors cannot exploit the flaw.", "description_and_impact": "WP Recipe Maker, a WordPress plugin, contains a missing capability check on two AJAX endpoints\u2014'ajax_search_recipes' and 'ajax_get_recipe'. Any authenticated user with Subscriber-level permissions or higher can invoke these endpoints and retrieve recipe data that should be restricted, including drafts, pending, and private recipes. This unauthorized data access constitutes a breach of confidentiality and is classified as CWE\u2011639.", "risk_and_exploitability": "The CVSS score of 4.3 indicates moderate severity, and the EPSS score of less than 1% reflects a very low but non\u2011zero likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog. Attackers must possess at least Subscriber credentials, making the attack vector internal but legitimate user context. If such credentials are compromised or misused, an attacker can read sensitive recipe data before a vendor patch is applied."}}}}, "created": "2026-02-26T13:18:16.894561+00:00", "updated": "2026-04-27T20:15:12.265814+00:00", "vendors": ["brechtvds", "brechtvds$PRODUCT$wp_recipe_maker", "wordpress", "wordpress$PRODUCT$wordpress"]}