CVE-2026-73999

Contributor Insecure Direct Object References (IDOR) in Cooked <= 1.16.0 versions.

Credits

Nixxies | Patchstack Bug Bounty Program

References

https://patchstack.com/database/wordpress/plugin/cooked/vulnerability/wordpress-cooked-plugin-1-16-0-insecure-direct-object-references-idor-vulnerability?_s_id=cve