Cooked – Recipe Management
Cooked – Recipe Management has 14 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2026; all 14 are fixed as of October 2026. Their average CVSS score is 5.4, and the most serious one scores 6.4 out of 10. 2024 was the busiest year with 7 disclosures.
The most common weakness is Cross-Site Scripting, behind 7 of the records (50%). Other recurring categories include Cross-Site Request Forgery (CSRF), Authorization Bypass Through User-Controlled Key.
Every one of the 14 issues recorded for Cooked – Recipe Management has a vendor fix available, so running the current release closes all known holes.
8 independent researchers contributed these findings, most of them (7) reported by R3N0. Cooked – Recipe Management is installed on roughly 3,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
CVE-2026-77829Cooked <= 1.16.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via [cooked-timer] Shortcode Content
Read the full analysisVulnerability Records
Cooked – Recipe Management
Author
Gora Tech
Cooked is the absolute best way to create & display recipes with WordPress. SEO optimized (rich snippets), galleries, cooking timers, printable recipes and much more. Check out the full list below. Be sure to check out the Live Preview as well as the Cooked Documentation if you need some help! Quality design & usability Using the drag & drop recipe builder, you can create your recipes quickly and without limitations. Add ingredients, directions—and then add a gallery, nutrition facts, cooking times and much more. Google-friendly Cooked automatically includes semantic structure and schema.org microdata into each and every recipe you publish. This allows Google to display your recipes across a variety of device sizes and platforms. Many premium features already included Most recipe plugins require that you purchase a PRO version for features like nutrition facts, galleries, powerful searching, timers, etc. The standard version of Cooked includes all of these. Here’s what you get out of the box: Drag & drop ingredients and directions. SEO Optimized – Google Structured Data and Schema.org support. Beautiful grid-based masonry recipe lists. Prep & Cooking Times Photo Galleries Nutrition Facts Difficulty Levels Recipe Notes Powerful recipe search with a text search, categories & sorting options. Author template to list recipes by a single author. Cooking times with clickable, interactive timers. Very developer-friendly with loads of hooks & filters. Servings switcher to adjust ingredient amounts. Ingredient Substitutions – Add alternative ingredients for dietary restrictions or preferences. CSV Import – Bulk import recipes from CSV files with support for ingredients, directions, substitutions, and more. And more to come… Of course, if you want even more, you can always check out the PRO version of Cooked. It adds features like ratings & favorites, recipe submissions, and so much more. Developers love it Cooked has a whole bunch of actions and filters to customize Cooked as much as you need to. Be sure to check out the Developer Documentation.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C