Plugin icon

Cooked – Recipe Management

cooked

Vulnerabilities:

10

Last Updated:

October 5, 2026

Active Installs:

3000

Published
Title
Fixed in
CVSS
Published
2026-10-15
Title
Cooked < 1.16.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via [cooked-timer] Shortcode Content
Fixed in
Fixed in 1.16.2
CVSS
5.5 (medium)
Published
2026-09-16
Title
Cooked – Recipe Management < 1.16.1 - Authenticated (Contributor+) Insecure Direct Object Reference
Fixed in
Fixed in 1.16.1
CVSS
2.7 (low)
Published
2025-12-31
Title
Cooked < 1.11.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.11.4
CVSS
4.4 (medium)
Published
2025-12-24
Title
Cooked < 1.11.4 - Missing Authorization
Fixed in
Fixed in 1.11.4
CVSS
5.3 (medium)
Published
2024-08-04
Title
Cooked – Recipe Management < 1.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Fixed in
Fixed in 1.8.1
CVSS
6.4 (medium)
Published
2024-06-13
Title
Cooked – Recipe Management <= Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.8.0
CVSS
6.4 (medium)
Published
2023-10-02
Title
Cooked < 1.7.15.1 - Contributor+ Stored XSS
Fixed in
Fixed in 1.7.15.1
CVSS
5.9 (medium)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.1.13
CVSS
6.1 (medium)
Published
2021-07-01
Title
Cooked < 1.7.9.1 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Fixed in
Fixed in 1.7.9.1
CVSS
5.4 (medium)
Published
2021-03-30
Title
Cooked Pro < 1.7.5.6 - Unauthenticated Reflected Cross Site Scripting (XSS)
Fixed in
Fixed in 1.7.5.6
CVSS
6.1 (medium)