What is GHSA-cmc3-8j7j-94xr?

GHSA-cmc3-8j7j-94xr is a security advisory published by GitHub Security Advisories with Medium severity. The WP Recipe Maker WordPress plugin before 10.8.2 does not perform any capability check in one...

Which CVE IDs does GHSA-cmc3-8j7j-94xr cover?

GHSA-cmc3-8j7j-94xr covers the following CVE IDs: CVE-2026-86602. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-cmc3-8j7j-94xr?

GHSA-cmc3-8j7j-94xr has a CVSS v3 base score of 4.3, published by GitHub Security Advisories.

GHSA-cmc3-8j7j-94xrMediumCVSS 4.3

The WP Recipe Maker WordPress plugin before 10.8.2 does not perform any capability check in one...

Vendor

GitHub Security Advisories

Published

September 23, 2026

Last Modified

September 23, 2026

🔗 CVE IDs covered (1)

CVE-2026-86602 →

📋 Description

The WP Recipe Maker WordPress plugin before 10.8.2 does not perform any capability check in one of its AJAX actions, allowing any authenticated user, such as a subscriber, to read the full content of unpublished recipes.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-86602
https://wpscan.com/vulnerability/46324e95-20dc-465e-90ab-14bcbf136166
https://github.com/advisories/GHSA-cmc3-8j7j-94xr