Vulnerabilities > Boxystudio > High

DATE CVE VULNERABILITY TITLE RISK
2024-10-20 CVE-2024-49290 Cross-Site Request Forgery (CSRF) vulnerability in Boxystudio Cooked 1.7.5.6/1.7.5.7
Cross-Site Request Forgery (CSRF) vulnerability in Gora Tech LLC Cooked Pro allows Cross Site Request Forgery.This issue affects Cooked Pro: from n/a before 1.8.0.
network
low complexity
boxystudio CWE-352
8.8
2023-12-28 CVE-2022-36399 Unspecified vulnerability in Boxystudio Booked
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in BoxyStudio Booked - Appointment Booking for WordPress | Calendars.This issue affects Booked - Appointment Booking for WordPress | Calendars: from n/a before 2.4.4.
network
low complexity
boxystudio
7.5