BoxyStudio vulnerabilities
We track 4 vulnerabilities in BoxyStudio products across 3 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on October 20, 2024.
Latest BoxyStudio vulnerabilities
- 8.8 High severity
Cooked Pro: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in Gora Tech LLC Cooked Pro allows Cross Site Request Forgery.This issue affects Cooked Pro: from n/a before 1.8.0.
- 8.8 High severity
Cooked: Cross-Site Request Forgery
Cooked is a recipe plugin for WordPress. The Cooked plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) in versions up to, and including, 1.7.15.4 due to missing or incorrect nonce validation on the AJAX action handler. This vulnerability c
- 8.8 High severity
Cooked: Cross-Site Request Forgery
Cooked is a recipe plugin for WordPress. The Cooked plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) in versions up to, and including, 1.7.15.4 due to missing or incorrect nonce validation on the AJAX action handler. This vulnerability c
- 7.5 High severity
Booked - Appointment Booking for WordPress |…: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in BoxyStudio Booked - Appointment Booking for WordPress | Calendars.This issue affects Booked - Appointment Booking for WordPress | Calendars: from n/a before 2.4.4.