What is GHSA-gqcc-7g9m-fmgc?

GHSA-gqcc-7g9m-fmgc is a security advisory published by GitHub Security Advisories with Medium severity. The WP Recipe Maker WordPress plugin before 10.8.2 does not have any authorisation check in one...

Which CVE IDs does GHSA-gqcc-7g9m-fmgc cover?

GHSA-gqcc-7g9m-fmgc covers the following CVE IDs: CVE-2026-86603. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-gqcc-7g9m-fmgc?

GHSA-gqcc-7g9m-fmgc has a CVSS v3 base score of 4.3, published by GitHub Security Advisories.

GHSA-gqcc-7g9m-fmgcMediumCVSS 4.3

The WP Recipe Maker WordPress plugin before 10.8.2 does not have any authorisation check in one...

Vendor

GitHub Security Advisories

Published

September 23, 2026

Last Modified

September 23, 2026

🔗 CVE IDs covered (1)

CVE-2026-86603 →

📋 Description

The WP Recipe Maker WordPress plugin before 10.8.2 does not have any authorisation check in one of its AJAX actions, allowing any authenticated user, such as a subscriber, to retrieve the IDs and titles of other users' unpublished lists.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-86603
https://wpscan.com/vulnerability/f5eedd48-91a6-4216-9e96-32dfb7a23ee4
https://github.com/advisories/GHSA-gqcc-7g9m-fmgc