Cooked Pro

Cooked Pro has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2024; all 5 are fixed as of September 2026. Their average CVSS score is 7.3, and the most serious one scores 9.8 out of 10. Severity breakdown: 2 critical and 0 high. 2024 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (40%). Other recurring categories include Cross-Site Request Forgery (CSRF), Deserialization Of Untrusted Data.

Every one of the 5 issues recorded for Cooked Pro has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, most of them (3) reported by R3N0.

Strategic Overview

Avg CVSSHigh

7.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Cooked Pro vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2024-49291

Cooked Pro < 1.8.0 - Unauthenticated Arbitrary File Upload

Read the full analysis

Vulnerability Records

5 records


2024-10-15 00:00	Cooked Pro < 1.8.0 - Cross-Site Request Forgery Cooked Pro < 1.8.0	`CVE-2024-49290`	4.3 Medium	R3N0	Yes
2024-10-15 00:00	Cooked Pro < 1.8.0 - Unauthenticated Arbitrary File Upload Cooked Pro < 1.8.0	`CVE-2024-49291`	9.8 Critical	R3N0	Yes
2024-10-15 00:00	Cooked Pro < 1.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Cooked Pro < 1.8.0	`CVE-2024-49289`	6.4 Medium	R3N0	Yes
2022-11-21 00:00	Cooked Pro < 1.7.5.7 - Unauthenticated PHP Object Injection Cooked Pro < 1.7.5.7	`CVE-2022-3900`	9.8 Critical	Marcin Motwicki	Yes
2021-03-30 00:00	Cooked Pro <= 1.7.5.5 - Reflected Cross-Site Scripting Cooked Pro < 1.7.5.6	`CVE-2021-24233`	6.1 Medium	Jinson Varghese Behanan	Yes

Showing 1–5 of 5 reports