Cooked Security Vulnerabilities and Issues — Cooked CVE List

Lucene search

BoxystudioCooked

12 matches found

CVE•added 2024/10/20 11:15 a.m.•52 views

CVE-2024-49290

Cross-Site Request Forgery (CSRF) vulnerability in Gora Tech LLC Cooked Pro allows Cross Site Request Forgery.This issue affects Cooked Pro: from n/a before 1.8.0.

8.8CVSS6.4AI score0.00048EPSS

CVE•added 2022/12/12 6:15 p.m.•49 views

CVE-2022-3900

The Cooked Pro WordPress plugin before 1.7.5.7 does not properly validate or sanitize the recipe_args parameter before unserializing it in the cooked_loadmore action, allowing an unauthenticated attacker to trigger a PHP Object injection vulnerability.

9.8CVSS9.8AI score0.27335EPSS

CVE•added 2023/10/02 9:15 a.m.•45 views

CVE-2023-44477

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Boxy Studio Cooked plugin

6.5CVSS5.5AI score0.00077EPSS

CVE•added 2024/06/13 2:15 p.m.•45 views

CVE-2024-37308

The Cooked Pro recipe plugin for WordPress is vulnerable to Persistent Cross-Site Scripting (XSS) via the _recipe_settings[post_title] parameter in versions up to, and including, 1.7.15.4 due to insufficient input sanitization and output escaping. This vulnerability allows authenticated attackers w...

5.4CVSS5.5AI score0.02262EPSS

CVE•added 2024/07/18 1:15 a.m.•43 views

CVE-2024-39678

Cooked is a recipe plugin for WordPress. The Cooked plugin is vulnerable to Cross-Site Request Forgery (CSRF) in versions up to, and including, 1.7.15.4 due to missing or incorrect nonce validation on the AJAX action handler. This vulnerability could allow an attacker to trick users into performing...

8.8CVSS5AI score0.00175EPSS

CVE•added 2024/07/18 1:15 a.m.•40 views

CVE-2024-39679

Cooked is a recipe plugin for WordPress. The Cooked plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) in versions up to, and including, 1.7.15.4 due to missing or incorrect nonce validation on the AJAX action handler. This vulnerability could allow an attacker to trick users i...

8.8CVSS5AI score0.00238EPSS

CVE•added 2021/04/22 9:15 p.m.•38 views

CVE-2021-24233

The Cooked Pro WordPress plugin before 1.7.5.6 was affected by unauthenticated reflected Cross-Site Scripting issues, due to improper sanitisation of user input while being output back in pages as an arbitrary attribute.

6.1CVSS6.1AI score0.05481EPSS

CVE•added 2024/07/18 1:15 a.m.•38 views

CVE-2024-39680

8.8CVSS5.9AI score0.00252EPSS

CVE•added 2024/07/18 1:15 a.m.•38 views

CVE-2024-39681

8.8CVSS5.9AI score0.00185EPSS

CVE•added 2024/10/17 6:15 p.m.•36 views

CVE-2024-49291

Unrestricted Upload of File with Dangerous Type vulnerability in Gora Tech LLC Cooked Pro.This issue affects Cooked Pro: from n/a before 1.8.0.

10CVSS9.6AI score0.00394EPSS

CVE•added 2024/07/18 1:15 a.m.•33 views

CVE-2024-39682

Cooked is a recipe plugin for WordPress. The Cooked plugin for WordPress is vulnerable to HTML Injection in versions up to, and including, 1.7.15.4 due to insufficient input sanitization and output escaping. This vulnerability allows authenticated attackers with contributor-level access and above t...

6.4CVSS6.7AI score0.00794EPSS

CVE•added 2024/08/05 8:15 p.m.•24 views

CVE-2024-41816

Cooked is a recipe plugin for WordPress. The Cooked plugin for WordPress is vulnerable to Persistent Cross-Site Scripting (XSS) via the ‘[cooked-timer]’ shortcode in versions up to, and including, 1.8.0 due to insufficient input sanitization and output escaping. This vulnerability allows authentica...

5.4CVSS5.2AI score0.00499EPSS