Recipe Manager Security & Risk Analysis

wordpress.org/plugins/recipe-manager

The most powerful and easy to use recipe plugin for WordPress.

10 active installs v1.0.0 PHP + WP 3.6+ Updated Feb 28, 2018
cookcookingfoodreciperecipes
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Recipe Manager Safe to Use in 2026?

Generally Safe

Score 85/100

Recipe Manager has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 8yr ago
Risk Assessment

The "recipe-manager" v1.0.0 plugin exhibits a generally strong security posture, with several positive indicators. The absence of known CVEs and a consistent record of no recorded vulnerabilities suggest good security practices have been followed throughout its development and maintenance. The plugin also demonstrates good habits regarding database interactions, with all SQL queries utilizing prepared statements, and a substantial number of capability checks in place. Nonce checks are also present, indicating an awareness of common WordPress attack vectors.

Key Concerns

  • Unsanitized paths in taint flows
  • Only 69% of outputs properly escaped
  • File operations present
  • External HTTP requests present
Vulnerabilities
None known

Recipe Manager Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Recipe Manager Release Timeline

v1.0.0Current
Code Analysis
Analyzed Apr 16, 2026

Recipe Manager Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
10 prepared
Unescaped Output
127
282 escaped
Nonce Checks
4
Capability Checks
10
File Operations
1
External Requests
7
Bundled Libraries
0

SQL Query Safety

100% prepared10 total queries

Output Escaping

69% escaped409 total outputs
Data Flows · Security
2 unsanitized

Data Flow Analysis

2 flows2 with unsanitized paths
rcpm_tools_sysinfo_download (includes/tool-functions.php:264)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Recipe Manager Attack Surface

Entry Points1
Unprotected0

Shortcodes 1

[recipe] classes/Shortcodes.php:15
WordPress Hooks 105
actioninitclasses/Actions.php:16
actioninitclasses/Actions.php:17
actionadmin_enqueue_scriptsclasses/Admin/Assets.php:16
actionprint_media_templatesclasses/Admin/Assets.php:43
actionadd_meta_boxes_ingredientclasses/Admin/Ingredients/Metaboxes.php:13
actionrcpm_save_ingredientclasses/Admin/Ingredients/Metaboxes.php:14
actionsave_postclasses/Admin/Ingredients/Metaboxes.php:15
actionadmin_menuclasses/Admin/Pages.php:15
actionadmin_initclasses/Admin/Pages.php:16
actionload-post.phpclasses/Admin/Recipes/Help.php:15
actionload-post-new.phpclasses/Admin/Recipes/Help.php:16
actionadd_meta_boxes_recipeclasses/Admin/Recipes/Metaboxes.php:15
actionedit_form_after_editorclasses/Admin/Recipes/Metaboxes.php:16
actionsave_postclasses/Admin/Recipes/Metaboxes.php:17
filtercron_schedulesclasses/Cron.php:26
actionwpclasses/Cron.php:27
filterrcpm_settings_licensesclasses/License.php:81
actionrcpm_settings_tab_topclasses/License.php:84
actionadmin_initclasses/License.php:87
actionadmin_initclasses/License.php:90
actionrcpm_weekly_scheduled_eventsclasses/License.php:93
actionadmin_initclasses/License.php:99
actionadmin_noticesclasses/License.php:102
actioninitclasses/Post_Types.php:21
actioninitclasses/Post_Types.php:22
actionwp_enqueue_scriptsclasses/Site.php:15
filtertemplate_includeclasses/Site.php:16
actionrcpm_settings_general_sanitizeclasses/Tracking.php:46
actionrcpm_opt_into_trackingclasses/Tracking.php:47
actionrcpm_opt_out_of_trackingclasses/Tracking.php:48
actionadmin_noticesclasses/Tracking.php:49
actionrcpm_weekly_scheduled_eventsclasses/Tracking.php:233
filterpre_set_site_transient_update_pluginsclasses/Updater.php:67
filterplugins_apiclasses/Updater.php:68
actionadmin_initclasses/Updater.php:71
filterpre_set_site_transient_update_pluginsclasses/Updater.php:243
actionsave_postclasses/Widget.php:34
actiondeleted_postclasses/Widget.php:35
actionswitch_themeclasses/Widget.php:36
filterrcpm_existing_addon_imagesincludes/addon-functions.php:13
filterrcpm_attr_recipe-wrapperincludes/data-attr-functions.php:9
actionwp_headincludes/data-attr-functions.php:23
filterrcpm_attr_recipe-wrapperincludes/schema-functions.php:23
filterrcpm_attr_recipe-titleincludes/schema-functions.php:24
filterrcpm_attr_recipe-imageincludes/schema-functions.php:25
filterrcpm_attr_recipe-descriptionincludes/schema-functions.php:26
filterrcpm_attr_recipe-prep-timeincludes/schema-functions.php:27
filterrcpm_attr_recipe-cook-timeincludes/schema-functions.php:28
filterrcpm_attr_recipe-total-timeincludes/schema-functions.php:29
filterrcpm_attr_recipe-ingredientincludes/schema-functions.php:30
filterrcpm_attr_recipe-stepincludes/schema-functions.php:31
filterwp_get_attachment_image_attributesincludes/schema-functions.php:32
actionrcpm_before_recipe_contentincludes/schema-functions.php:33
actionrcpm_before_recipe_contentincludes/schema-functions.php:34
actionrcpm_before_recipe_contentincludes/schema-functions.php:35
actionwp_headincludes/schema-functions.php:38
actionadmin_initincludes/setting-functions.php:182
filterrcpm_settings_sanitize_textincludes/setting-functions.php:374
filterrcpm_settings_general_sanitizeincludes/setting-functions.php:397
actionthe_postincludes/template-functions.php:34
filterloop_endincludes/template-functions.php:60
actionrcpm_recipe_ingredients_togetherincludes/template-functions.php:914
actionrcpm_recipe_ingredients_together_by_phaseincludes/template-functions.php:952
filterbody_classincludes/template-hooks.php:18
filterpost_classincludes/template-hooks.php:19
actionwp_headincludes/template-hooks.php:28
actionget_the_generator_htmlincludes/template-hooks.php:29
actionget_the_generator_xhtmlincludes/template-hooks.php:30
actionrcpm_before_main_contentincludes/template-hooks.php:39
actionrcpm_after_main_contentincludes/template-hooks.php:40
actionrcpm_sidebarincludes/template-hooks.php:56
actionrcpm_before_recipes_loopincludes/template-hooks.php:75
actionrcpm_before_recipes_loop_item_titleincludes/template-hooks.php:81
actionrcpm_recipes_loop_item_titleincludes/template-hooks.php:82
actionrcpm_after_recipes_loop_itemincludes/template-hooks.php:83
actionrcpm_after_recipes_loop_itemincludes/template-hooks.php:84
actionrcpm_recipes_loop_item_metaincludes/template-hooks.php:85
actionrcpm_recipes_loop_item_metaincludes/template-hooks.php:86
actionrcpm_recipes_list_item_titleincludes/template-hooks.php:91
actionrcpm_shortcode_recipe_summaryincludes/template-hooks.php:97
actionrcpm_shortcode_recipe_summaryincludes/template-hooks.php:98
actionrcpm_shortcode_recipe_summaryincludes/template-hooks.php:99
actionrcpm_shortcode_recipe_summaryincludes/template-hooks.php:100
actionrcpm_shortcode_recipe_summaryincludes/template-hooks.php:101
actionrcpm_shortcode_recipe_summaryincludes/template-hooks.php:102
actionrcpm_shortcode_recipe_summaryincludes/template-hooks.php:103
actionrcpm_shortcode_recipe_summaryincludes/template-hooks.php:104
actionrcpm_single_recipe_summaryincludes/template-hooks.php:116
actionrcpm_single_recipe_summaryincludes/template-hooks.php:117
actionrcpm_single_recipe_summaryincludes/template-hooks.php:118
actionrcpm_single_recipe_summaryincludes/template-hooks.php:119
actionrcpm_single_recipe_summaryincludes/template-hooks.php:120
actionrcpm_single_recipe_summaryincludes/template-hooks.php:121
actionrcpm_single_recipe_summaryincludes/template-hooks.php:122
actionrcpm_single_recipe_summaryincludes/template-hooks.php:123
actionrcpm_single_recipe_summaryincludes/template-hooks.php:124
actionrcpm_single_recipe_summaryincludes/template-hooks.php:125
actionrcpm_single_recipe_summaryincludes/template-hooks.php:126
actionrcpm_single_recipe_summaryincludes/template-hooks.php:127
actionrcpm_single_recipe_metaincludes/template-hooks.php:135
actionrcpm_single_recipe_metaincludes/template-hooks.php:136
actionafter_setup_themeincludes/templating-functions.php:166
actionrcpm_tools_page_tab_system_infoincludes/tool-functions.php:39
actionrcpm_recipe_sysinfoincludes/tool-functions.php:275
actionplugins_loadedrecipe-manager.php:121

Scheduled Events 2

rcpm_weekly_scheduled_events
rcpm_daily_scheduled_events
Maintenance & Trust

Recipe Manager Maintenance & Trust

Maintenance Signals

WordPress version tested4.9.29
Last updatedFeb 28, 2018
PHP min version
Downloads2K

Community Trust

Rating20/100
Number of ratings1
Active installs10
Developer Profile

Recipe Manager Developer Profile

Daniel Iser

8 plugins · 827K total installs

68
trust score
Avg Security Score
84/100
Avg Patch Time
588 days
View full developer profile
Detection Fingerprints

How We Detect Recipe Manager

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/recipe-manager/assets/css/dashicons-picker.css/wp-content/plugins/recipe-manager/assets/js/vendor/dashicons-picker.js/wp-content/plugins/recipe-manager/assets/css/admin-general.css/wp-content/plugins/recipe-manager/assets/js/admin-general.js/wp-content/plugins/recipe-manager/assets/css/admin-recipe-edit.css/wp-content/plugins/recipe-manager/assets/js/admin-recipe-edit.js/wp-content/plugins/recipe-manager/assets/css/admin-recipe-list.css/wp-content/plugins/recipe-manager/assets/js/admin-recipe-list.js+6 more
Script Paths
/wp-content/plugins/recipe-manager/assets/js/vendor/dashicons-picker.js/wp-content/plugins/recipe-manager/assets/js/admin-general.js/wp-content/plugins/recipe-manager/assets/js/admin-recipe-edit.js/wp-content/plugins/recipe-manager/assets/js/admin-recipe-list.js/wp-content/plugins/recipe-manager/assets/js/admin-settings.js/wp-content/plugins/recipe-manager/assets/js/admin-tools.js+1 more
Version Parameters
recipe-manager/assets/css/dashicons-picker.css?ver=recipe-manager/assets/js/vendor/dashicons-picker.js?ver=recipe-manager/assets/css/admin-general.css?ver=recipe-manager/assets/js/admin-general.js?ver=recipe-manager/assets/css/admin-recipe-edit.css?ver=recipe-manager/assets/js/admin-recipe-edit.js?ver=recipe-manager/assets/css/admin-recipe-list.css?ver=recipe-manager/assets/js/admin-recipe-list.js?ver=recipe-manager/assets/css/admin-settings.css?ver=recipe-manager/assets/js/admin-settings.js?ver=recipe-manager/assets/css/admin-tools.css?ver=recipe-manager/assets/js/admin-tools.js?ver=recipe-manager/assets/css/frontend-recipe.css?ver=recipe-manager/assets/js/frontend-recipe.js?ver=

HTML / DOM Fingerprints

CSS Classes
rcpm-recipe-detailsrcpm-recipe-ingredientsrcpm-recipe-instructionsrcpm-recipe-nutritionrcpm-recipe-metarcpm-admin-editor-sectionrcpm-fieldrcpm-field-wrap+83 more
HTML Comments
<!-- Addons --><!-- Tools --><!-- Setting Functions --><!-- Schema & Microdata functions. -->+6 more
Data Attributes
data-rcpm-iddata-rcpm-typedata-rcpm-parent-iddata-rcpm-recipe-iddata-rcpm-ingredient-iddata-rcpm-instruction-id+1 more
JS Globals
RCPM_AdminRCPM_Admin_Recipe_EditRCPM_Admin_Recipe_ListRCPM_Admin_SettingsRCPM_Admin_ToolsRCPM_Frontend_Recipe
Shortcode Output
[recipe][/recipe][recipe_details][/recipe_details]
FAQ

Frequently Asked Questions about Recipe Manager