Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

brechtvds — Vulnerabilities & Security Advisories 28

Browse all 28 CVE security advisories affecting brechtvds. AI-powered Chinese analysis, POCs, and references for each vulnerability.

brechtvds operates as a software development entity, primarily known for creating open-source tools and utilities that facilitate system administration and network management. Security audits have identified twenty-four Common Vulnerabilities and Exposures (CVEs) associated with its codebase, indicating a history of significant technical oversight. The most prevalent vulnerability classes include Remote Code Execution (RCE) and Cross-Site Scripting (XSS), which often stem from inadequate input validation and improper handling of user-supplied data. Additionally, several instances of privilege escalation and insecure direct object references have been documented, suggesting weaknesses in access control mechanisms. While no single catastrophic incident has defined the entity’s public reputation, the cumulative effect of these flaws highlights a pattern of recurring security gaps in its development lifecycle. These issues necessitate rigorous code review processes and automated security testing to mitigate risks for downstream users relying on brechtvds’ software solutions.

Found 20 results / 28 Clear Filters
CVE ID Title CVSS Severity Published
CVE-2026-89274 WP Recipe Maker <= 10.8.1 - Unauthenticated Arbitrary Shortcode Execution via Recipe Comment Content — WP Recipe Maker CWE-94 9.1 Critical 2026-09-19
CVE-2026-90884 WP Recipe Maker <= 10.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'notes' Parameter via REST Preview Endpoint — WP Recipe Maker CWE-79 5.4 Medium 2026-09-18
CVE-2026-75905 WP Recipe Maker <= 10.8.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Recipe Ownership Takeover and Unpublishing via '[wprm-recipe]' Shortcode — WP Recipe Maker CWE-862 4.3 Medium 2026-09-09
CVE-2026-1558 WP Recipe Maker <= 10.3.2 - Insecure Direct Object Reference to Unauthenticated Arbitrary Post Metadata Modification via 'recipeId' Parameter — WP Recipe Maker CWE-639 5.3 Medium 2026-02-27
CVE-2025-14742 WP Recipe Maker <= 10.2.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure — WP Recipe Maker CWE-639 4.3 Medium 2026-02-25
CVE-2025-15527 WP Recipe Maker <= 10.2.2 - Insecure Direct Object Reference to Sensitive Information Exposure — WP Recipe Maker CWE-200 4.3 Medium 2026-01-16
CVE-2025-14385 WP Recipe Maker <= 10.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode — WP Recipe Maker CWE-79 6.4 Medium 2025-12-17
CVE-2025-1503 WP Recipe Maker <= 9.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting — WP Recipe Maker CWE-79 6.4 Medium 2025-03-13
CVE-2024-9650 WP Recipe Maker <= 9.6.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'tooltip' — WP Recipe Maker CWE-79 6.5 Medium 2024-10-24
CVE-2024-0383 WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'group_tag' — WP Recipe Maker CWE-79 6.4 Medium 2024-06-19
CVE-2024-3490 WP Recipe Maker <= 9.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wprm-recipe-roundup-item Shortcode — WP Recipe Maker CWE-79 6.4 Medium 2024-05-02
CVE-2024-1571 WP Recipe Maker <= 9.2.1 - Authenticated Stored Cross-Site Scripting via Video Embed — WP Recipe Maker CWE-79 4.4 Medium 2024-04-09
CVE-2024-1206 WP Recipe Maker <= 9.1.2 - Missing Authorization to Authenticated (Subscriber+) SQL Injecton — WP Recipe Maker CWE-89 8.8 High 2024-02-20
CVE-2024-0384 WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Recipe Notes — WP Recipe Maker CWE-79 6.4 Medium 2024-02-05
CVE-2024-0255 WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via icon_color — WP Recipe Maker CWE-79 6.4 Medium 2024-02-05
CVE-2024-0380 WP Recipe Maker <= 9.1.0 - Directory Traversal — WP Recipe Maker CWE-22 5.4 Medium 2024-02-05
CVE-2024-0382 WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via header_tag — WP Recipe Maker CWE-79 6.4 Medium 2024-02-05
CVE-2024-0381 WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tag' — WP Recipe Maker CWE-79 6.4 Medium 2024-01-18
CVE-2023-6958 WP Recipe Maker <= 9.1.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode — WP Recipe Maker CWE-79 6.4 Medium 2024-01-18
CVE-2023-6970 WP Recipe Maker <= 9.1.0 - Reflected Cross-Site Scripting via Referer — WP Recipe Maker CWE-79 6.1 Medium 2024-01-18

This page lists every published CVE security advisory associated with brechtvds. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.