Boxystudio Cooked vulnerabilities

• boxystudio cooked, gora tech llc cooked pro +1 more WordPress Cooked Pro plugin < 1.8.0 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-49290 4.3 MediumOctober 20, 2024
• boxystudio cooked, gora tech llc cooked pro +1 more WordPress Cooked Pro plugin < 1.8.0 - Unauthenticated Arbitrary File Upload vulnerability CVE-2024-49291 10.0 CriticalOctober 17, 2024
• boxy studio cooked WordPress Cooked Plugin Persistent Cross-Site Scripting via Shortcode CVE-2024-41816 5.4 MediumAugust 5, 2024
• boxy studio cooked WordPress Cooked Plugin - Authenticated (Contributor+) HTML Injection via Recipe Excerpt CVE-2024-39682 6.4 MediumJuly 17, 2024
• boxy studio cooked WordPress Cooked Plugin - Cross-Site Request Forgery to Apply Template to All Recipes CVE-2024-39681 5.4 MediumJuly 17, 2024
• boxy studio cooked WordPress Cooked Plugin - Cross-Site Request Forgery to Default Recipe Template Save CVE-2024-39680 5.4 MediumJuly 17, 2024
• boxy studio cooked WordPress Cooked Plugin - Cross-Site Request Forgery to Recipe Template Reset CVE-2024-39679 4.3 MediumJuly 17, 2024
• boxy studio cooked WordPress Cooked Plugin - Cross-Site Request Forgery to Get Recipe IDs CVE-2024-39678 4.3 MediumJuly 17, 2024
• boxy studio cooked WordPress Cooked Plugin - Authenticated (Contributor+) Persistent Cross-Site Scripting Vulnerability CVE-2024-37308 5.4 MediumJune 13, 2024
• boxy studio cooked WordPress Cooked Plugin <= 1.7.13 is vulnerable to Cross Site Scripting (XSS) CVE-2023-44477 6.5 MediumOctober 2, 2023
• boxystudio cooked, gora tech llc cooked pro +1 more Cooked Pro < 1.7.5.7 - Unauthenticated PHP Object Injection CVE-2022-3900 EPSS 19.0% 9.8 CriticalDecember 12, 2022
• boxystudio cooked, unknown cooked ppro +1 more Cooked Pro < 1.7.5.6 - Unauthenticated Reflected Cross Site Scripting (XSS) CVE-2021-24233 6.1 MediumApril 22, 2021