Vulnerabilities > Boxystudio > Cooked > Critical

DATE CVE VULNERABILITY TITLE RISK
2022-12-12 CVE-2022-3900 Unspecified vulnerability in Boxystudio Cooked 1.7.5.6
The Cooked Pro WordPress plugin before 1.7.5.7 does not properly validate or sanitize the recipe_args parameter before unserializing it in the cooked_loadmore action, allowing an unauthenticated attacker to trigger a PHP Object injection vulnerability.
network
low complexity
boxystudio
critical
 9.8
9.8