Lucene search
K

71 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:4 a.m.4 views

CVE-2024-41816

Cooked is a recipe plugin for WordPress. The Cooked plugin for WordPress is vulnerable to Persistent Cross-Site Scripting XSS via the ‘cooked-timer’ shortcode in versions up to, and including, 1.8.0 due to insufficient input sanitization and output escaping. This vulnerability allows authenticate...

5.4CVSS5.7AI score0.0193EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:4 a.m.2 views

CVE-2024-39681

Cooked is a recipe plugin for WordPress. The Cooked plugin for WordPress is vulnerable to Cross-Site Request Forgery CSRF in versions up to, and including, 1.7.15.4 due to missing or incorrect nonce validation on the AJAX action handler. This vulnerability could allow an attacker to trick users...

8.8CVSS6.9AI score0.00324EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:4 a.m.6 views

CVE-2024-39678

Cooked is a recipe plugin for WordPress. The Cooked plugin is vulnerable to Cross-Site Request Forgery CSRF in versions up to, and including, 1.7.15.4 due to missing or incorrect nonce validation on the AJAX action handler. This vulnerability could allow an attacker to trick users into performing...

8.8CVSS6.9AI score0.00457EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:3 a.m.5 views

CVE-2024-39679

Cooked is a recipe plugin for WordPress. The Cooked plugin for WordPress is vulnerable to Cross-Site Request Forgery CSRF in versions up to, and including, 1.7.15.4 due to missing or incorrect nonce validation on the AJAX action handler. This vulnerability could allow an attacker to trick users...

8.8CVSS6.9AI score0.00457EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:3 a.m.5 views

CVE-2024-39680

Cooked is a recipe plugin for WordPress. The Cooked plugin for WordPress is vulnerable to Cross-Site Request Forgery CSRF in versions up to, and including, 1.7.15.4 due to missing or incorrect nonce validation on the AJAX action handler. This vulnerability could allow an attacker to trick users...

8.8CVSS6.9AI score0.00324EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/12/31 5:19 p.m.1 views

CVE-2025-62989 WordPress Cooked plugin <= 1.11.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Gora Tech Cooked cooked allows Stored XSS.This issue affects Cooked: from n/a through = 1.11.3...

5.9CVSS5.2AI score0.00023EPSS
Exploits0References1
CVE
CVE
added 2025/12/31 5:19 p.m.2 views

CVE-2025-62989

CVE-2025-62989 discusses an Improper Neutralization of Input During Web Page Generation (Stored XSS) in the WordPress plugin Cooked . Affected: Cooked versions from unspecified base up to a maximum of 1.11.3 . Root cause: input is not properly neutralized during web page generation, enabling stor...

5.9CVSS5.9AI score0.00023EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/12/31 5:12 p.m.4 views

WordPress Cooked plugin <= 1.11.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by ch1mk in WordPress Plugin Cooked versions = 1.11.3...

5.9CVSS5.9AI score0.00023EPSS
Exploits0Affected Software1
CNNVD
CNNVD
added 2025/12/31 12:0 a.m.1 views

WordPress plugin Cooked 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

5.9CVSS5.9AI score0.00023EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/24 1:10 p.m.1 views

CVE-2025-68586 WordPress Cooked plugin <= 1.11.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Gora Tech Cooked cooked allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cooked: from n/a through = 1.11.2...

6.6AI score0.00038EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/24 1:10 p.m.27 views

CVE-2025-68586 WordPress Cooked plugin <= 1.11.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Gora Tech Cooked cooked allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cooked: from n/a through = 1.11.3...

5.3CVSS0.00038EPSS
Exploits0References1
CVE
CVE
added 2025/12/24 1:10 p.m.4 views

CVE-2025-68586

CVE-2025-68586 describes a Missing Authorization vulnerability in the Cooked (WordPress) plugin, affecting Cooked: from n/a through

5.3CVSS5.9AI score0.00038EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/12/24 3:54 a.m.6 views

WordPress Cooked plugin <= 1.11.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Cooked versions = 1.11.3...

8.8CVSS6.8AI score0.00038EPSS
Exploits0Affected Software1
CNNVD
CNNVD
added 2025/12/24 12:0 a.m.1 views

WordPress plugin Cooked 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.3CVSS6.6AI score0.00038EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-38181

Malicious code in bioql PyPI...

8.8CVSS6.5AI score0.00457EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-48814

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.00077EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-38183

Malicious code in bioql PyPI...

8.8CVSS6.5AI score0.00324EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-39201

Malicious code in bioql PyPI...

5.4CVSS6.4AI score0.0193EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-38184

Malicious code in bioql PyPI...

8.8CVSS6.5AI score0.00324EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-38182

Malicious code in bioql PyPI...

8.8CVSS6.5AI score0.00457EPSS
Exploits1References1
Rows per page
Query Builder