Gora Tech LLC vulnerabilities and threats

3 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	4.3	EPSS 0.2%	CVE-2024-49290Cooked Pro (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2024-10-20CVE Database V5CVE-2024-49290 Cross-Site Request Forgery (CSRF) vulnerability in Gora Tech LLC Cooked Pro allows Cross Site Request Forgery.This issue affects Cooked Pro: from n/a before 1.8.0. EPSS 0.2%Vulnerability Gora Tech CWE-352	CVE Database V5	2024-10-20
Medium	6.5	EPSS 0.3%	CVE-2024-49289Cooked Pro (WordPress plugin) · XSS or 'Cross-site Scripting' Medium6.5EPSS 0.3%2024-10-17CVE Database V5CVE-2024-49289 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Gora Tech LLC Cooked Pro allows Stored XSS.This issue affects Cooked Pro: from n/a before 1.8.0. EPSS 0.3%Vulnerability Gora Tech CWE-79	CVE Database V5	2024-10-17
Critical	10.0	EPSS 0.5%	CVE-2024-49291Cooked Pro (WordPress plugin) · Unrestricted File Upload Critical10.0EPSS 0.5%2024-10-17CVE Database V5CVE-2024-49291 Unrestricted Upload of File with Dangerous Type vulnerability in Gora Tech LLC Cooked Pro.This issue affects Cooked Pro: from n/a before 1.8.0. EPSS 0.5%Vulnerability Gora Tech CWE-434	CVE Database V5	2024-10-17

Page 1 of 1