Cooked is a recipe plugin for WordPress. The Cooked plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) in versions up to, and including, 1.7.15.4 due to missing or incorrect nonce validation on the AJAX action handler. This vulnerability could allow an attacker to trick users into performing an action they didn't intend to perform under their current authentication. This issue has been addressed in release version 1.8.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: GitHub_M
Published: 2024-07-17T23:47:52.745Z
Updated: 2024-08-02T04:26:16.019Z
Reserved: 2024-06-27T18:44:13.034Z
Link: CVE-2024-39680
Vulnrichment
Updated: 2024-07-18T13:42:39.926Z
NVD
Status : Awaiting Analysis
Published: 2024-07-18T01:15:14.647
Modified: 2024-11-21T09:28:12.453
Link: CVE-2024-39680
Redhat
No data.