boxystudio vulnerabilities

Recent CVEs affecting boxystudio products. 10 tracked.

boxystudio has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 10. Most recent: 2024-10-20. Highest priority: CVE-2024-39682 (score 35/100).

• CVE-2024-49290 MEDIUM 4.3 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in Gora Tech LLC Cooked Pro allows Cross Site Request Forgery.
• CVE-2024-41816 MEDIUM 5.4 UPGRADE Cooked is a recipe plugin for WordPress
• CVE-2024-39682 MEDIUM 6.4 UPGRADE Cooked is a recipe plugin for WordPress
• CVE-2024-39681 MEDIUM 5.4 UPGRADE Cooked is a recipe plugin for WordPress
• CVE-2024-39680 MEDIUM 5.4 UPGRADE Cooked is a recipe plugin for WordPress
• CVE-2024-39679 MEDIUM 4.3 UPGRADE Cooked is a recipe plugin for WordPress
• CVE-2024-39678 MEDIUM 4.3 UPGRADE Cooked is a recipe plugin for WordPress
• CVE-2024-37308 MEDIUM 5.4 UPGRADE The Cooked Pro recipe plugin for WordPress is vulnerable to Persistent Cross-Site Scripting (XSS) via the `_re
• CVE-2023-44477 MEDIUM 6.5 UPGRADE Auth
• CVE-2022-36399 MEDIUM 5.3 UPGRADE Exposure of Sensitive Information to an Unauthorized Actor vulnerability in BoxyStudio Booked - Appointment Bo

FAQ

How do I fix boxystudio vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is boxystudio being exploited right now?

None of the tracked boxystudio CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which boxystudio CVE should I patch first?

CVE-2024-39682 currently ranks highest (35/100): Cooked is a recipe plugin for WordPress.

Products

• booked
• cooked

RSS feed for boxystudio · ← Back to latest CVEs