Boxy Studio Cooked vulnerabilities

• boxy studio cooked WordPress Cooked plugin <= 1.16.0 - Insecure Direct Object References (IDOR) vulnerability CVE-2026-73999 5.4 MediumSeptember 17, 2026
• boxy studio cooked WordPress Cooked plugin <= 1.11.3 - Cross Site Scripting (XSS) vulnerability CVE-2025-62989 5.9 MediumDecember 31, 2025
• boxy studio cooked WordPress Cooked plugin <= 1.11.3 - Broken Access Control vulnerability CVE-2025-68586 5.3 MediumDecember 24, 2025
• boxy studio cooked WordPress Cooked Plugin Persistent Cross-Site Scripting via Shortcode CVE-2024-41816 5.4 MediumAugust 5, 2024
• boxy studio cooked WordPress Cooked Plugin - Authenticated (Contributor+) HTML Injection via Recipe Excerpt CVE-2024-39682 6.4 MediumJuly 17, 2024
• boxy studio cooked WordPress Cooked Plugin - Cross-Site Request Forgery to Apply Template to All Recipes CVE-2024-39681 5.4 MediumJuly 17, 2024
• boxy studio cooked WordPress Cooked Plugin - Cross-Site Request Forgery to Default Recipe Template Save CVE-2024-39680 5.4 MediumJuly 17, 2024
• boxy studio cooked WordPress Cooked Plugin - Cross-Site Request Forgery to Recipe Template Reset CVE-2024-39679 4.3 MediumJuly 17, 2024
• boxy studio cooked WordPress Cooked Plugin - Cross-Site Request Forgery to Get Recipe IDs CVE-2024-39678 4.3 MediumJuly 17, 2024
• boxy studio cooked WordPress Cooked Plugin - Authenticated (Contributor+) Persistent Cross-Site Scripting Vulnerability CVE-2024-37308 5.4 MediumJune 13, 2024
• boxy studio cooked WordPress Cooked Plugin <= 1.7.13 is vulnerable to Cross Site Scripting (XSS) CVE-2023-44477 6.5 MediumOctober 2, 2023