Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Cooked — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in Cooked, with AI-generated Chinese analysis, references, and POCs.

Vendor: Boxy Studio

CVE IDTitleCVSSSeverityPublished
CVE-2025-62989 WordPress Cooked plugin <= 1.11.3 - Cross Site Scripting (XSS) vulnerability CWE-79 5.9 Medium2025-12-31
CVE-2025-68586 WordPress Cooked plugin <= 1.11.3 - Broken Access Control vulnerability CWE-862 5.3 Medium2025-12-24
CVE-2024-41816 WordPress Cooked Plugin Persistent Cross-Site Scripting via Shortcode CWE-79 5.4 Medium2024-08-05
CVE-2024-39682 WordPress Cooked Plugin - Authenticated (Contributor+) HTML Injection via Recipe Excerpt CWE-116 6.4 Medium2024-07-17
CVE-2024-39681 WordPress Cooked Plugin - Cross-Site Request Forgery to Apply Template to All Recipes CWE-352 5.4 Medium2024-07-17
CVE-2024-39680 WordPress Cooked Plugin - Cross-Site Request Forgery to Default Recipe Template Save CWE-352 5.4 Medium2024-07-17
CVE-2024-39679 WordPress Cooked Plugin - Cross-Site Request Forgery to Recipe Template Reset CWE-352 4.3 Medium2024-07-17
CVE-2024-39678 WordPress Cooked Plugin - Cross-Site Request Forgery to Get Recipe IDs CWE-352 4.3 Medium2024-07-17
CVE-2024-37308 WordPress Cooked Plugin - Authenticated (Contributor+) Persistent Cross-Site Scripting Vulnerability CWE-79 5.4 Medium2024-06-13
CVE-2023-44477 WordPress Cooked Plugin <= 1.7.13 is vulnerable to Cross Site Scripting (XSS) CWE-79 6.5 Medium2023-10-02

All 10 known CVE vulnerabilities affecting Cooked with full Chinese analysis, references, and POCs where available.