PLUGIN SECURITY
Is Recipe Card Blocks Lite safe?
Known vulnerabilities, PHP compatibility and safer alternatives for the Recipe Card Blocks Lite WordPress plugin — checked against WP Clinic's local security database.
What this plugin does
- Slug:
recipe-card-blocks-by-wpzoom
Maintenance status
Known vulnerabilities
11 known CVEs on file for Recipe Card Blocks Lite. Reported between 2021 and 2026.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-115282 | Recipe Card Blocks Lite [recipe-card-blocks-by-wpzoom] >= 2.6.4 - < 3.6.4 | Exposure of Sensitive Information to an Unauthorized Actor | Unknown | 2.6.4–3.6.4 | 3.6.4 | 2026-10-29 | — |
| CVE-2026-125948 | Recipe Card Blocks Lite [recipe-card-blocks-by-wpzoom] < 3.7.1 | Improper Neutralization of Input During Web Page Generation | Medium 6.4 | < 3.7.1 | 3.7.1 | 2026-10-28 | — |
| CVE-2026-115281 | Recipe Card Blocks Lite [recipe-card-blocks-by-wpzoom] >= 3.5.0 - < 3.6.4 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | Unknown | 3.5.0–3.6.4 | 3.6.4 | 2026-08-18 | — |
| CVE-2026-3011 | Recipe Card Blocks Lite [recipe-card-blocks-by-wpzoom] < 3.4.14 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.4 | < 3.4.14 | 3.4.14 | 2026-06-07 | — |
| CVE-2026-73361 | Recipe Card Blocks Lite [recipe-card-blocks-by-wpzoom] < 3.4.19 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | High 7.1 | < 3.4.19 | 3.4.19 | 2026-06-07 | — |
| CVE-2025-14973 | Recipe Card Blocks Lite [recipe-card-blocks-by-wpzoom] < 3.4.13 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | Medium 6.8 | < 3.4.13 | 3.4.13 | 2026-01-26 | — |
| CVE-2025-62019 | Recipe Card Blocks Lite [recipe-card-blocks-by-wpzoom] < 3.4.9 | Missing Authorization | Medium 6.5 | < 3.4.9 | 3.4.9 | 2025-09-11 | — |
| CVE-2025-26983 | Recipe Card Blocks Lite [recipe-card-blocks-by-wpzoom] < 3.4.4 | Missing Authorization | Medium 4.3 | < 3.4.4 | 3.4.4 | 2025-02-23 | — |
+ 3 more known vulnerabilities
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2024-43293 | Recipe Card Blocks Lite [recipe-card-blocks-by-wpzoom] < 3.3.2 | Missing Authorization | High 8.8 | < 3.3.2 | 3.3.2 | 2024-08-16 | — |
| CVE-2021-24632 | Recipe Card Blocks Lite [recipe-card-blocks-by-wpzoom] < 2.8.3 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.1 | < 2.8.3 | 2.8.3 | 2021-08-24 | — |
| CVE-2021-24634 | Recipe Card Blocks Lite [recipe-card-blocks-by-wpzoom] < 2.8.3 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 2.8.3 | 2.8.3 | 2021-08-24 | — |
How to fix it
Update this plugin to the latest release from wordpress.org — each CVE above lists the exact release that fixed it ("Fixed in") when one is on file.
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.