Skip to content
OpenAdvisories

Vendor

XjSv

8 known vulnerabilities.

Products

Cooked 7 Basil 1
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 5.4
    CVE-2024-41816

    WordPress Cooked Plugin Persistent Cross-Site Scripting via Shortcode

    Cooked is a recipe plugin for WordPress. The Cooked plugin for WordPress is vulnerable to Persistent Cross-Site Scripting (XSS) via the ‘[cooked-timer]’ shortcode in versions up to, and including, 1.8.0 due to insufficient input sanitization and output escapi…

    XjSv Cooked Web / CMS
  • Medium 6.4
    CVE-2024-39682

    WordPress Cooked Plugin - Authenticated (Contributor+) HTML Injection via Recipe Excerpt

    Cooked is a recipe plugin for WordPress. The Cooked plugin for WordPress is vulnerable to HTML Injection in versions up to, and including, 1.7.15.4 due to insufficient input sanitization and output escaping. This vulnerability allows authenticated attackers w…

    XjSv Cooked Web / CMS
  • Medium 5.4
    CVE-2024-39681

    WordPress Cooked Plugin - Cross-Site Request Forgery to Apply Template to All Recipes

    Cooked is a recipe plugin for WordPress. The Cooked plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) in versions up to, and including, 1.7.15.4 due to missing or incorrect nonce validation on the AJAX action handler. This vulnerability …

    XjSv Cooked Web / CMS
  • Medium 5.4
    CVE-2024-39680

    WordPress Cooked Plugin - Cross-Site Request Forgery to Default Recipe Template Save

    Cooked is a recipe plugin for WordPress. The Cooked plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) in versions up to, and including, 1.7.15.4 due to missing or incorrect nonce validation on the AJAX action handler. This vulnerability …

    XjSv Cooked Web / CMS
  • Medium 4.3
    CVE-2024-39679

    WordPress Cooked Plugin - Cross-Site Request Forgery to Recipe Template Reset

    Cooked is a recipe plugin for WordPress. The Cooked plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) in versions up to, and including, 1.7.15.4 due to missing or incorrect nonce validation on the AJAX action handler. This vulnerability …

    XjSv Cooked Web / CMS
  • Medium 4.3
    CVE-2024-39678

    WordPress Cooked Plugin - Cross-Site Request Forgery to Get Recipe IDs

    Cooked is a recipe plugin for WordPress. The Cooked plugin is vulnerable to Cross-Site Request Forgery (CSRF) in versions up to, and including, 1.7.15.4 due to missing or incorrect nonce validation on the AJAX action handler. This vulnerability could allow an…

    XjSv Cooked Web / CMS
  • Medium 5.4
    CVE-2024-39310

    WordPress Basil Theme Authenticated (Contributor+) Persistent Cross-Site Scripting Vulnerability

    The Basil recipe theme for WordPress is vulnerable to Persistent Cross-Site Scripting (XSS) via the `post_title` parameter in versions up to, and including, 2.0.4 due to insufficient input sanitization and output escaping. This vulnerability allows authentica…

    XjSv Basil Web / CMS
  • Medium 5.4
    CVE-2024-37308

    WordPress Cooked Plugin - Authenticated (Contributor+) Persistent Cross-Site Scripting Vulnerability

    The Cooked Pro recipe plugin for WordPress is vulnerable to Persistent Cross-Site Scripting (XSS) via the `_recipe_settings[post_title]` parameter in versions up to, and including, 1.7.15.4 due to insufficient input sanitization and output escaping. This vuln…

    XjSv Cooked Web / CMS