Input validation vulnerability in Cooked – Recipe Management 1.7.15.4

A plugin called Cooked – Recipe Management for WordPress has a security issue where attackers can inject harmful code into pages. This can happen because the plugin doesn’t properly check the information being inserted. This vulnerability only affects versions 1.7.15.4 and below, and only users with contributor-level access or higher can exploit it. The issue has been fixed, but the updated version is currently only available on Github.

Detected in:

Cooked – Recipe Management fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.