VendorsBoxyStudiocookedany version
Vulnerabilities

BoxyStudio Cooked any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

11CVEs
CVE-2022-3900
Cooked Pro < 1.7.5.7 - Unauthenticated PHP Object Injection
Published 2022-12-12 · Modified
9.8EPSS 0.190
CVE-2024-39678
WordPress Cooked Plugin - Cross-Site Request Forgery to Get Recipe IDs
Published 2024-07-17 · Analyzed
8.8EPSS 0.003
CVE-2024-39679
WordPress Cooked Plugin - Cross-Site Request Forgery to Recipe Template Reset
Published 2024-07-17 · Analyzed
8.8EPSS 0.003
CVE-2024-39680
WordPress Cooked Plugin - Cross-Site Request Forgery to Default Recipe Template Save
Published 2024-07-17 · Analyzed
8.8EPSS 0.003
CVE-2024-39681
WordPress Cooked Plugin - Cross-Site Request Forgery to Apply Template to All Recipes
Published 2024-07-17 · Analyzed
8.8EPSS 0.003
CVE-2024-49290
WordPress Cooked Pro plugin < 1.8.0 - Cross Site Request Forgery (CSRF) vulnerability
Published 2024-10-20 · Modified
8.8EPSS 0.002
CVE-2023-44477
WordPress Cooked Plugin <= 1.7.13 is vulnerable to Cross Site Scripting (XSS)
Published 2023-10-02 · Modified
6.5EPSS 0.003
CVE-2024-39682
WordPress Cooked Plugin - Authenticated (Contributor+) HTML Injection via Recipe Excerpt
Published 2024-07-17 · Analyzed
6.4EPSS 0.004
CVE-2021-24233
Cooked Pro < 1.7.5.6 - Unauthenticated Reflected Cross Site Scripting (XSS)
Published 2021-04-22 · Modified
6.1EPSS 0.017
CVE-2024-37308
WordPress Cooked Plugin - Authenticated (Contributor+) Persistent Cross-Site Scripting Vulnerability
Published 2024-06-13 · Analyzed
5.4EPSS 0.004
CVE-2024-41816
WordPress Cooked Plugin Persistent Cross-Site Scripting via Shortcode
Published 2024-08-05 · Analyzed
5.4EPSS 0.004