Skip to content
OpenAdvisories

Vendor

Gora Tech

6 known vulnerabilities.

Products

Cooked 3 Cooked Pro 3
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-73999

    WordPress Cooked plugin <= 1.16.0 - Insecure Direct Object References (IDOR) vulnerability

    Contributor Insecure Direct Object References (IDOR) in Cooked <= 1.16.0 versions.

    Gora Tech Cooked
  • Medium 5.9
    CVE-2025-62989

    WordPress Cooked plugin <= 1.11.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gora Tech Cooked cooked allows Stored XSS.This issue affects Cooked: from n/a through <= 1.11.3.

    Gora Tech Cooked
  • Medium 5.3
    CVE-2025-68586

    WordPress Cooked plugin <= 1.11.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Gora Tech Cooked cooked allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cooked: from n/a through <= 1.11.3.

    Gora Tech Cooked
  • Medium 4.3
    CVE-2024-49290

    WordPress Cooked Pro plugin < 1.8.0 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Gora Tech LLC Cooked Pro allows Cross Site Request Forgery.This issue affects Cooked Pro: from n/a before 1.8.0.

    Gora Tech Cooked Pro
  • Medium 6.5
    CVE-2024-49289

    WordPress Cooked Pro plugin < 1.8.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Gora Tech LLC Cooked Pro allows Stored XSS.This issue affects Cooked Pro: from n/a before 1.8.0.

    Gora Tech Cooked Pro