cooked vulnerabilities and fixes

Recent CVEs affecting cooked, with upgrade or downgrade steps. 9 tracked.

cooked has 9 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 9. Most recent: 2024-10-20. Highest priority: CVE-2024-39682 (score 35/100).

• CVE-2024-49290 MEDIUM 4.3 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in Gora Tech LLC Cooked Pro allows Cross Site Request Forgery.
• CVE-2024-41816 MEDIUM 5.4 UPGRADE Cooked is a recipe plugin for WordPress
• CVE-2024-39682 MEDIUM 6.4 UPGRADE Cooked is a recipe plugin for WordPress
• CVE-2024-39681 MEDIUM 5.4 UPGRADE Cooked is a recipe plugin for WordPress
• CVE-2024-39680 MEDIUM 5.4 UPGRADE Cooked is a recipe plugin for WordPress
• CVE-2024-39679 MEDIUM 4.3 UPGRADE Cooked is a recipe plugin for WordPress
• CVE-2024-39678 MEDIUM 4.3 UPGRADE Cooked is a recipe plugin for WordPress
• CVE-2024-37308 MEDIUM 5.4 UPGRADE The Cooked Pro recipe plugin for WordPress is vulnerable to Persistent Cross-Site Scripting (XSS) via the `_re
• CVE-2023-44477 MEDIUM 6.5 UPGRADE Auth

FAQ

How do I fix cooked vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is cooked being exploited right now?

None of the tracked cooked CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which cooked CVE should I patch first?

CVE-2024-39682 currently ranks highest (35/100): Cooked is a recipe plugin for WordPress.

RSS feed for cooked · ← Back to latest CVEs