Skip to content
PluginCanary

WP Recipe Maker

by Brecht · 50,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 30 Oct 2026, 57 releases in 24 months, no unpatched vulnerabilities.

83/ 100 Canary Score
Sub-scores for WP Recipe Maker
Ownership100
Maintenance100
Security60
Support70
Reputation85

How the score works

Quick answers

Is WP Recipe Maker still maintained?
Yes. Last release 30 Oct 2026, 57 releases in the last 24 months. 30 Oct 2026 · wordpress.org
Who owns WP Recipe Maker, and has it changed hands?
No change recorded. Main committer BrechtVds since Sep 2016. 4 Nov 2026 · SVN log
Was WP Recipe Maker removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is WP Recipe Maker safe?
27 known vulnerabilities, all fixed (latest in 10.8.2). Not on the exploited list. 21 Sep 2026 · Wordfence Intelligence
Is the latest WP Recipe Maker update safe to install?
No ownership change before 10.9.2. No one-star spike after it. 30 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
BrechtVds7 Sep 2016 to 30 Oct 2026, 363 commits

1 committer recorded. No ownership change since 2016.

Maintenance

Last release
5 days ago
Releases, 24 months
57
Tested up to
7.1 current
Requires PHP
7.2 supported 8.2+
Releases per quarter
Releases per quarter for WP Recipe Maker
Q1 202437
Q2 20242
Q3 20240
Q4 20242
Q1 20251
Q2 20250
Q3 20252
Q4 202533
Q1 20267
Q2 20263
Q3 20268
Q4 20263

Last release 30 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 5.0 (4 reviews). Lifetime: 5.0.

Average rating per quarter for WP Recipe Maker
Q3 20245.0
Q4 20245.0
Q1 20255.0
Q2 20255.0
Q3 20255.0
Q4 20255.0
Q1 20265.0
Q2 20265.0
Q3 20265.0
Q4 20265.0

Average rating stayed at 5.0 between Q3 2024 and Q4 2026.

Rating distribution
5 star349
4 star5
3 star1
2 star0
1 star2

Security record

14 vulnerabilities in 24 months (27 on record), all patched (latest fixed in 10.8.2).

Show 27 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
21 Sep 2026Recipe Maker <= 10.8.1 - Authenticated (Subscriber+) Information Exposure4.3<= 10.8.110.8.2Patched before disclosure
21 Sep 2026Recipe Maker <= 10.8.1 - Unauthenticated Arbitrary Shortcode Execution6.5<= 10.8.110.8.2Patched before disclosure
21 Sep 2026Recipe Maker 9.8.0 - 10.8.1 - Unauthenticated Arbitrary User Meta Corruption5.39.8.0 to 10.8.110.8.2Patched before disclosure
21 Sep 2026Recipe Maker 10.3.0 - 10.8.1 - Authenticated (Subscriber+) Information Exposure4.310.3.0 to 10.8.110.8.2Patched before disclosure
18 Sep 2026WP Recipe Maker <= 10.8.1 - Unauthenticated Arbitrary Shortcode Execution via Recipe Comment Content9.1<= 10.8.110.8.2Patched before disclosure
17 Sep 2026WP Recipe Maker <= 10.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'notes' Parameter via REST Preview Endpoint5.4<= 10.8.110.8.2Patched before disclosure
8 Sep 2026WP Recipe Maker <= 10.8.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Recipe Ownership Takeover and Unpublishing via '[wprm-recipe]' Shortcode4.3<= 10.8.010.8.1Patched before disclosure
26 Feb 2026WP Recipe Maker <= 10.3.2 - Insecure Direct Object Reference to Unauthenticated Arbitrary Post Metadata Modification via 'recipeId' Parameter5.3<= 10.3.210.3.3Patched before disclosure
24 Feb 2026WP Recipe Maker <= 10.6.0 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure4.3<= 10.6.010.6.186
28 Jan 2026Recipe Maker <= 10.2.4 - Missing Authorization4.3<= 10.2.410.3.0Patched before disclosure
16 Dec 2025WP Recipe Maker <= 10.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4<= 10.2.310.2.4Patched before disclosure
11 Dec 2025WP Recipe Maker <= 10.2.2 - Insecure Direct Object Reference to Sensitive Information Exposure4.3<= 10.2.210.2.3Patched before disclosure
26 Sep 2025WP Recipe Maker < 10.1.0 - Unauthenticated Arbitrary Shortcode Execution5.3< 10.1.010.1.061
12 Mar 2025WP Recipe Maker <= 9.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 9.8.09.8.1259
23 Oct 2024WP Recipe Maker <= 9.6.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'tooltip'6.5<= 9.6.19.7.0399
18 Jun 2024WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'group_tag'6.4<= 9.1.09.1.1n/a
1 May 2024WP Recipe Maker <= 9.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wprm-recipe-roundup-item Shortcode6.4<= 9.3.19.4.0574
14 Mar 2024WP Recipe Maker <= 9.2.1 - Authenticated Stored Cross-Site Scripting via Video Embed4.4<= 9.2.19.3.0n/a
7 Feb 2024WP Recipe Maker <= 9.1.2 - Missing Authorization to Authenticated (Subscriber+) SQL Injecton8.8<= 9.1.29.2.01
17 Jan 2024WP Recipe Maker <= 9.1.0 - Reflected Cross-Site Scripting via Referer6.1<= 9.1.09.1.1n/a
17 Jan 2024WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via header_tag6.4<= 9.1.09.1.1n/a
17 Jan 2024WP Recipe Maker <= 9.1.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode6.4<= 9.1.09.1.1n/a
17 Jan 2024WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Recipe Notes6.4<= 9.1.09.1.1n/a
17 Jan 2024WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via icon_color6.4<= 9.1.09.1.1n/a
17 Jan 2024WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tag'6.4<= 9.1.09.1.1n/a

Changelog mentions of security fixes: 10.8.2 (XSS, authorization); 10.9.2 (security).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 2 support threads resolved in the last 2 months.

Momentum

50,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for WP Recipe Maker
4 May 2026966
11 May 20261,974
18 May 202645,764
25 May 20266,998
1 Jun 20263,486
8 Jun 20262,826
15 Jun 20262,212
22 Jun 20261,944
29 Jun 202619,960
6 Jul 202628,160
13 Jul 20269,040
20 Jul 20263,472
27 Jul 20262,757
3 Aug 20262,554
10 Aug 202625,404
17 Aug 20265,391
24 Aug 20263,598
31 Aug 202625,179
7 Sep 20267,069
14 Sep 202664,946
21 Sep 202632,390
28 Sep 20264,586
5 Oct 20263,454
12 Oct 202642,318
19 Oct 20267,413
26 Oct 202625,634
2 Nov 20262,448

Weekly downloads over the last 4 weeks are 38% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

No healthier plugin in the same category yet.

Facts

Version10.9.2
AuthorBrecht
Added7 Sep 2016
Last updated30 Oct 2026
Active installs50,000+
Requires WordPress6.6
Tested up to7.1.4
Requires PHP7.2
CategoryE-commerce & Shopping
Tagsfood, Recipe, schema, cooking, recipes

Other plugins by this author: Visual Link Preview, Easy Affiliate Links, WP Ultimate Post Grid, Easy Image Collage, Custom Related Posts, Dynamic Widget Content

Questions

Is WP Recipe Maker still maintained?

Yes. Last release 30 Oct 2026, 57 releases in the last 24 months.

Who owns WP Recipe Maker, and has it changed hands?

No change recorded. Main committer BrechtVds since Sep 2016.

Was WP Recipe Maker removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is WP Recipe Maker safe?

27 known vulnerabilities, all fixed (latest in 10.8.2). Not on the exploited list.

Is the latest WP Recipe Maker update safe to install?

No ownership change before 10.9.2. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue