What is GHSA-cr7x-4whh-v74w?

GHSA-cr7x-4whh-v74w is a security advisory published by GitHub Security Advisories with Medium severity. The Recipe Card Blocks Lite WordPress plugin before 3.6.4 does not sanitize and cast a block and...

Which CVE IDs does GHSA-cr7x-4whh-v74w cover?

GHSA-cr7x-4whh-v74w covers the following CVE IDs: CVE-2026-115281. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-cr7x-4whh-v74w?

GHSA-cr7x-4whh-v74w has a CVSS v3 base score of 6.8, published by GitHub Security Advisories.

GHSA-cr7x-4whh-v74wMediumCVSS 6.8

The Recipe Card Blocks Lite WordPress plugin before 3.6.4 does not sanitize and cast a block and...

Vendor

GitHub Security Advisories

Published

October 28, 2026

Last Modified

October 28, 2026

🔗 CVE IDs covered (1)

CVE-2026-115281 →

📋 Description

The Recipe Card Blocks Lite WordPress plugin before 3.6.4 does not sanitize and cast a block and shortcode attribute before concatenating it into SQL queries, allowing authenticated users with Contributor-level access or above to perform SQL injection attacks.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-115281
https://wpscan.com/vulnerability/f358ccee-e664-4a0e-a2b9-d9710c8174ad
https://github.com/advisories/GHSA-cr7x-4whh-v74w