{"metadata": {"vulnerability": "CVE-2026-77829", "count": 14, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-08-21T14:51:38.267Z", "date_only": false, "value": "2026-08-21T14:51:38.267Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-77829", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-77829", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-10-16T03:38:39.787Z", "date_only": false, "value": "2026-10-16T03:38:39.787Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-77829", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-16T03:38:39.787Z", "date_only": false, "value": "2026-10-16T03:38:39.787Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-77829", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T03:59:24.036Z", "date_only": false, "value": "2026-10-16T03:59:24.036207Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117448583641488986", "record": "CVE-2026-77829", "field": "creation_timestamp", "uuid": "3e41b23e-ce4b-4cba-af9d-5aa85933e021", "content": "CVE-2026-77829 Cooked <= 1.16.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via [cooked-timer] Shortcode Content The Cooked \u2013 Recipe Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via [cooked-timer] Shortcode Content in all versions up to, and including, 1.16.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\nhttps://www.cve.org/CVERecord?id=CVE-2026-77829https://www.wordfence.com/threat-intel/vulnerabilities/id/0592380d-fd78-48ed-a180-299fc20a41ee?source=cvehttps://plugins.trac.wordpress.org/browser/cooked/tags/1.16.0/includes/class.cooked-shortcodes.php#L159https://plugins.trac.wordpress.org/browser/cooked/tags/1.16.0/includes/class.cooked-shortcodes.php#L155https://plugins.trac.wordpress.org/browser/cooked/tags/1.16.0/includes/class.cooked-shortcodes.php#L128https://plugins.trac.wordpress.org/changeset?reponame=&old=3729711%40cooked&new=3729711%40cooked#wordpress #goratech #Cooked\u2013RecipeManagement#CVE_2026_77829#bot", "url": "https://infosec.exchange/users/cve/statuses/117448583641488986"}, {"timestamp": "2026-10-16T04:18:38Z", "date_only": false, "value": "2026-10-16T04:18:38Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-8442-FC74-434Q", "record": "GHSA-8442-FC74-434Q", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-16T04:18:38.197Z", "date_only": false, "value": "2026-10-16T04:18:38.197", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-77829", "record": "FKIE_CVE-2026-77829", "field": "published"}, {"timestamp": "2026-10-16T06:30:24Z", "date_only": false, "value": "2026-10-16T06:30:24Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-8442-FC74-434Q", "record": "GHSA-8442-FC74-434Q", "field": "published"}, {"timestamp": "2026-10-16T06:30:24Z", "date_only": false, "value": "2026-10-16T06:30:24Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-8442-FC74-434Q", "record": "GHSA-8442-FC74-434Q", "field": "modified"}, {"timestamp": "2026-10-16T16:19:48.747Z", "date_only": false, "value": "2026-10-16T16:19:48.747088Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-77829", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-16T16:19:48.747Z", "date_only": false, "value": "2026-10-16T16:19:48.747088Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-77829", "record": "FKIE_CVE-2026-77829", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-16T16:20:03.763Z", "date_only": false, "value": "2026-10-16T16:20:03.763Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-77829", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-16T16:20:03.763Z", "date_only": false, "value": "2026-10-16T16:20:03.763Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-77829", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T17:17:50.537Z", "date_only": false, "value": "2026-10-16T17:17:50.537", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-77829", "record": "FKIE_CVE-2026-77829", "field": "lastModified"}]}