WP Recipe Maker

84 Quality Score

Active Installs

21/30

50,000 active installs is a solid mid-tier footprint, well behind the million-install SEO giants but healthy within its niche.

Update Freshness

25/25

Updated July 2026 with a recent release timestamp, indicating the developer is actively maintaining the codebase.

User Rating

15/15

A perfect 100/100 across 351 ratings is exceptional and reflects strong user satisfaction for this category.

Support Health

8/15

Only 3 support threads tracked with a 66.7% resolution rate, which is a thin sample and suggests either very few issues or limited forum activity to gauge.

WP Compatibility

15/15

Tested with WordPress 7.0.1 and requiring PHP 7.2 plus WordPress 4.4 minimum, showing wide backward and forward compatibility.

Scores higher than 92% of indexed plugins

About

The easy and user-friendly recipe plugin for everyone. Automatic JSON-LD metadata for food AND how-to recipes will improve your SEO!

Active Installs 50k+

Rating ★★★★★ 5/5

Last Updated 2026-09-21 2:33pm GMT

Requires WordPress 4.4+

Tested Up To 7.1.2

Requires PHP 7.2+

Security History

23 known vulnerabilities, all patched

1 Critical 1 High 21 Medium

Most recent: September 18, 2026

View details ▸

WP Recipe Maker <= 10.8.1 - Unauthenticated Arbitrary Shortcode Execution via Recipe Comment Content Critical

September 18, 2026 Patched in ["10.8.2"] CVE-2026-89274

WP Recipe Maker <= 10.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'notes' Parameter via REST Preview Endpoint Medium

September 17, 2026 Patched in ["10.8.2"] CVE-2026-90884

WP Recipe Maker <= 10.8.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Recipe Ownership Takeover and Unpublishing via '[wprm-recipe]' Shortcode Medium

September 8, 2026 Patched in ["10.8.1"] CVE-2026-75905

WP Recipe Maker <= 10.3.2 - Insecure Direct Object Reference to Unauthenticated Arbitrary Post Metadata Modification via 'recipeId' Parameter Medium

February 26, 2026 Patched in ["10.3.3"] CVE-2026-1558

WP Recipe Maker <= 10.6.0 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure Medium

February 24, 2026 Patched in ["10.6.1"] CVE-2025-14742

Recipe Maker <= 10.2.4 - Missing Authorization Medium

January 28, 2026 Patched in ["10.3.0"] CVE-2026-24357

WP Recipe Maker <= 10.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Medium

December 16, 2025 Patched in ["10.2.4"] CVE-2025-14385

WP Recipe Maker <= 10.2.2 - Insecure Direct Object Reference to Sensitive Information Exposure Medium

December 11, 2025 Patched in ["10.2.3"] CVE-2025-15527

WP Recipe Maker < 10.1.0 - Unauthenticated Arbitrary Shortcode Execution Medium

September 26, 2025 Patched in ["10.1.0"] CVE-2025-62897

WP Recipe Maker <= 9.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

March 12, 2025 Patched in ["9.8.1"] CVE-2025-1503

WP Recipe Maker <= 9.6.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'tooltip' Medium

October 23, 2024 Patched in ["9.7.0"] CVE-2024-9650

WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'group_tag' Medium

June 18, 2024 Patched in ["9.1.1"] CVE-2024-0383

WP Recipe Maker <= 9.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wprm-recipe-roundup-item Shortcode Medium

May 1, 2024 Patched in ["9.4.0"] CVE-2024-3490

WP Recipe Maker <= 9.2.1 - Authenticated Stored Cross-Site Scripting via Video Embed Medium

March 14, 2024 Patched in ["9.3.0"] CVE-2024-1571

WP Recipe Maker <= 9.1.2 - Missing Authorization to Authenticated (Subscriber+) SQL Injecton High

February 7, 2024 Patched in ["9.2.0"] CVE-2024-1206

WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via header_tag Medium

January 17, 2024 Patched in ["9.1.1"] CVE-2024-0382

WP Recipe Maker <= 9.1.0 - Reflected Cross-Site Scripting via Referer Medium

January 17, 2024 Patched in ["9.1.1"] CVE-2023-6970

WP Recipe Maker <= 9.1.0 - Directory Traversal Medium

January 17, 2024 Patched in ["9.1.1"] CVE-2024-0380

WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via icon_color Medium

January 17, 2024 Patched in ["9.1.1"] CVE-2024-0255

WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Recipe Notes Medium

January 17, 2024 Patched in ["9.1.1"] CVE-2024-0384

WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tag' Medium

January 17, 2024 Patched in ["9.1.1"] CVE-2024-0381

WP Recipe Maker <= 9.1.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode Medium

January 17, 2024 Patched in ["9.1.1"] CVE-2023-6958

WP Recipe Maker <= 8.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Medium

December 19, 2022 Patched in ["8.6.1"] CVE-2022-4468

What It Does

WP Recipe Maker lets food bloggers create structured recipe cards inside WordPress posts, including ingredients, steps, cook times, and nutrition fields. It automatically generates JSON-LD schema markup for both food and how-to recipes, which helps search engines display rich results without manual coding. The plugin also supports user ratings, printable views, and a recipe submission form.

Who It's For

This plugin is built for food bloggers, recipe developers, and culinary content creators who publish recipes regularly and want schema-rich snippets to drive traffic from Google. It suits small to mid-sized sites that need a clean, focused recipe workflow without building a full WooCommerce store. Writers who care about SEO and structured data will get the most value.

Who Should Skip It

If your site is not food- or recipe-focused, this plugin adds no value, and general SEO plugins like Rank Math or Yoast already cover basic schema needs. Sites running outdated PHP below 7.2 or WordPress below 4.4 cannot use it, which excludes a small fraction of legacy installs.

The Bottom Line

WP Recipe Maker earns an 83.54/100 overall quality score, anchored by perfect ratings and maintenance but pulled down by modest support history. It is the right pick for serious food bloggers who want purpose-built recipe tools and schema, rather than a general SEO plugin. If recipes are not central to your content strategy, a broader SEO plugin will serve you better.

Related Plugins

Yoast SEO 98/100

Pick Yoast when you need a general-purpose SEO suite with recipe schema support baked into a broader optimization toolkit.

All in One SEO 98/100

Choose AIOSEO if you want schema and SEO in one plugin but do not need dedicated recipe card features like printable views and user submissions.

Rank Math SEO 97/100

Rank Math fits sites that want advanced schema management and content AI features without installing a separate recipe plugin.

SEOPress 93/100

SEOPress is the better choice for budget-conscious publishers wanting lightweight SEO with solid schema at a fair price.

SureRank SEO 86/100

SureRank works for newer sites that want a simpler SEO setup with schema support but do not need a dedicated recipe card system.