Skip to content
OpenAdvisories

Product · Gora Tech

Cooked

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-73999

    WordPress Cooked plugin <= 1.16.0 - Insecure Direct Object References (IDOR) vulnerability

    Contributor Insecure Direct Object References (IDOR) in Cooked <= 1.16.0 versions.

    Gora Tech Cooked
  • Medium 5.9
    CVE-2025-62989

    WordPress Cooked plugin <= 1.11.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gora Tech Cooked cooked allows Stored XSS.This issue affects Cooked: from n/a through <= 1.11.3.

    Gora Tech Cooked
  • Medium 5.3
    CVE-2025-68586

    WordPress Cooked plugin <= 1.11.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Gora Tech Cooked cooked allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cooked: from n/a through <= 1.11.3.

    Gora Tech Cooked