Goratech Cooked vulnerabilities

• goratech cooked – recipe management Cooked <= 1.16.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via [cooked-timer] Shortcode Content CVE-2026-77829 6.4 MediumOctober 16, 2026
• boxy studio cooked WordPress Cooked Plugin Persistent Cross-Site Scripting via Shortcode CVE-2024-41816 5.4 MediumAugust 5, 2024