Input validation vulnerability in Cooked – Recipe Plugin 1.7.13

The Cooked plugin for WordPress is not secure for versions up to 1.7.13. It fails to properly filter user input and output, which means an attacker with contributor-level or higher permissions can add malicious scripts to pages. When someone visits an infected page, the malicious code will execute and may cause harm.