CVE-2019-15836: Bootstrapped Wp Ultimate Recipe

Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days.

The wp-ultimate-recipe plugin before 3.12.7 for WordPress has stored XSS.

Affected products

• Bootstrapped Wp Ultimate Recipe: before 3.12.7 (fixed in 3.12.7)

Published 2019-08-30. Last modified 2026-06-17.