Vulnerabilities

TI-2024-32882 CVE-2024-49289 · GHSA-4wjm-87f9-9842

WordPress Cooked Pro plugin < 1.8.0 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Gora Tech LLC Cooked Pro allows Stored XSS.This issue affects Cooked Pro: from n/a before 1.8.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00259 Published 2024-10-17 Fixed in 1.8.0 CWE-79

TI-2024-32884 CVE-2024-49291 · GHSA-6xfc-pfpw-jjvg

WordPress Cooked Pro plugin < 1.8.0 - Unauthenticated Arbitrary File Upload vulnerability

MEDIUM 49

Unrestricted Upload of File with Dangerous Type vulnerability in Gora Tech LLC Cooked Pro.This issue affects Cooked Pro: from n/a before 1.8.0.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00511 Published 2024-10-17 Fixed in 1.8.0 CWE-434

Vulnerabilities

Filters

WordPress Cooked Pro plugin < 1.8.0 - Cross Site Scripting (XSS) vulnerability

WordPress Cooked Pro plugin < 1.8.0 - Unauthenticated Arbitrary File Upload vulnerability