Xjsv Cooked
7 CVEs affecting Xjsv Cooked. Latest disclosed: 2024-08-05. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-39682 | Medium | 6.4 | 2024-07-18 | Cooked is a recipe plugin for WordPress. The Cooked plugin for WordPress is vulnerable to HTML Injection in versions up to, and including, 1.7.15.4 due to insu… |
CVE-2024-41816 | Medium | 5.4 | 2024-08-05 | Cooked is a recipe plugin for WordPress. The Cooked plugin for WordPress is vulnerable to Persistent Cross-Site Scripting (XSS) via the ‘[cooked-timer]’ shortc… |
CVE-2024-39681 | Medium | 5.4 | 2024-07-18 | Cooked is a recipe plugin for WordPress. The Cooked plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) in versions up to, and including, 1… |
CVE-2024-39680 | Medium | 5.4 | 2024-07-18 | Cooked is a recipe plugin for WordPress. The Cooked plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) in versions up to, and including, 1… |
CVE-2024-37308 | Medium | 5.4 | 2024-06-13 | The Cooked Pro recipe plugin for WordPress is vulnerable to Persistent Cross-Site Scripting (XSS) via the `_recipe_settings[post_title]` parameter in versions… |
CVE-2024-39679 | Medium | 4.3 | 2024-07-18 | Cooked is a recipe plugin for WordPress. The Cooked plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) in versions up to, and including, 1… |
CVE-2024-39678 | Medium | 4.3 | 2024-07-18 | Cooked is a recipe plugin for WordPress. The Cooked plugin is vulnerable to Cross-Site Request Forgery (CSRF) in versions up to, and including, 1.7.15.4 due to… |