CVE-2024-39682

Cooked is a recipe plugin for WordPress. The Cooked plugin for WordPress is vulnerable to HTML Injection in versions up to, and including, 1.7.15.4 due to insufficient input sanitization and output escaping. This vulnerability allows authenticated attackers with contributor-level access and above to inject arbitrary HTML in pages that will be shown whenever a user accesses a compromised page. This issue has been addressed in release version 1.8.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.

• CWE-116
• CWE-79

• https://github.com/XjSv/Cooked/security/advisories/GHSA-fx69-f77x-84grExploit, Vendor Advisory
• https://github.com/XjSv/Cooked/security/advisories/GHSA-fx69-f77x-84grExploit, Vendor Advisory

Published

Jul 18, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-39677NHibernate is an object-relational mapper for the .NET frame…9.8
• CVE-2024-39678Cooked is a recipe plugin for WordPress. The Cooked plugin i…8.8
• CVE-2024-39679Cooked is a recipe plugin for WordPress. The Cooked plugin f…8.8
• CVE-2024-3968Remote Code Execution has been discovered in OpenText™ iMana…9.8
• CVE-2024-39680Cooked is a recipe plugin for WordPress. The Cooked plugin f…8.8
• CVE-2024-39681Cooked is a recipe plugin for WordPress. The Cooked plugin f…8.8
• CVE-2024-39683ZITADEL is an open-source identity infrastructure tool. ZITA…6.5
• CVE-2024-39684Tencent RapidJSON is vulnerable to privilege escalation due …7.8
• CVE-2024-39685Bert-VITS2 is the VITS2 Backbone with multilingual bert. Use…9.8
• CVE-2024-39686Bert-VITS2 is the VITS2 Backbone with multilingual bert. Use…9.8
• CVE-2024-39687Fedify is a TypeScript library for building federated server…7.2
• CVE-2024-39688Bert-VITS2 is the VITS2 Backbone with multilingual bert. Use…6.5