PT-2026-4726 · WordPress · Recipe Card Blocks Lite

Purachai Phonwisut · Publicado 2026-01-26 · Atualizado 2026-01-26 · CVE-2025-14973

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Média

Vetor base

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Recipe Card Blocks Lite WordPress plugin versions prior to 3.4.13

Description The Recipe Card Blocks Lite WordPress plugin does not properly sanitize and escape a parameter before using it in a SQL statement. This allows users with contributor privileges or higher to potentially execute SQL injection attacks. The parameter used in the SQL statement is not properly handled, creating a risk for malicious code execution.

Recommendations Update the Recipe Card Blocks Lite WordPress plugin to version 3.4.13 or later.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2025-14973

Produtos afetados

Recipe Card Blocks Lite

Referências · 5

• 🔥 https://wpscan.com/vulnerability/76f7d5d4-ba45-4bfd-bda9-ab0769e81107 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-14973 · Nota de Segurança
• https://t.me/cveNotify/149831 · Publicação no Telegram
• https://t.me/CVEtracker/42985 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2015673749983395922 · Publicação no Twitter