Vulners
Lucene search
2 matches found
CVE-2022-3900
The Cooked Pro WordPress plugin before 1.7.5.7 does not properly validate or sanitize the recipeargs parameter before unserializing it in the cookedloadmore action, allowing an unauthenticated attacker to trigger a PHP Object injection vulnerability...
9.8CVSS0.04297EPSS
Exploits2References1
Design/Logic Flaw
The Cooked Pro WordPress plugin before 1.7.5.7 does not properly validate or sanitize the recipeargs parameter before unserializing it in the cookedloadmore action, allowing an unauthenticated attacker to trigger a PHP Object injection vulnerability...
7.5CVSS9.6AI score0.04297EPSS
Exploits2References1Affected Software1
20