NetSight
medium6.8

CVE-2025-14973

The Recipe Card Blocks Lite WordPress plugin before 3.4.13 does not sanitize and escape a parameter before using it in a SQL statement, allowing contributors a…

Impact

The Recipe Card Blocks Lite WordPress plugin before 3.4.13 does not sanitize and escape a parameter before using it in a SQL statement, allowing contributors and above to perform SQL injection attacks.

Affected products

ProductAffected versions
Recipe Card Blocks Lite WordPress Plugin
before 3.4.13

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

References