What the vulnerability does
01Description
Cooked is a recipe plugin for WordPress. The Cooked plugin is vulnerable to Cross-Site Request Forgery (CSRF) in versions up to, and including, 1.7.15.4 due to missing or incorrect nonce validation on the AJAX action handler. This vulnerability could allow an attacker to trick users into performing an action they didn't intend to perform under their current authentication. This issue has been addressed in release version 1.8.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Explanation of Vulnerability in Simple Terms
02Summary
Cooked versions before 1.8.0 are vulnerable to cross-site request forgery (CSRF) attacks. An attacker can craft a malicious webpage that, when visited by a logged-in site administrator, performs unwanted actions on the site without their knowledge. The vulnerability requires the victim to visit the attacker's page while authenticated. Integrity of site data or settings may be compromised.
What an attacker can do
03Attacker Capabilities
Perform unwanted actions on the site by tricking an authenticated admin into visiting a malicious webpage.
Potential impact on your site
04Site Impact
An attacker can modify site settings or data if an admin visits a malicious link while logged in.
Conditions required to exploit
05Prerequisites
Victim must be logged in and visit attacker-controlled page; no special privileges required.
Key dates
06Disclosure timeline
July 17, 2024
CVE published
August 2, 2024
Record updated
