CVE-2026-73361

Unauthenticated Cross Site Scripting (XSS) in Recipe Card Blocks for Gutenberg & Elementor <= 3.4.18 versions.

Credits

daroo | Patchstack Bug Bounty Program

References

https://patchstack.com/database/wordpress/plugin/recipe-card-blocks-by-wpzoom/vulnerability/wordpress-recipe-card-blocks-for-gutenberg-elementor-plugin-3-4-18-cross-site-scripting-xss-vulnerability?_s_id=cve