Advisories · Technology

WP Delicious.

Every CVE that names WP Delicious among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-92411 CVE record

CVSS 6.8 Medium

WP Delicious < 1.10.8 - Contributor+ Stored XSS via Recipe Block Tag Name
- WP Delicious
- Cross-site scripting (XSS)
Not analysed yet 26 Sept 2026
CVE-2026-14305 CVE record

CVSS 5.3 Medium

WP Delicious < 1.10.2 - Unauthenticated Arbitrary Post Meta Update via recipe_likes
- WP Delicious
- Authentication bypass
Not analysed yet 30 Jul 2026
CVE-2026-39528 CVE record

CVSS 5.3 Medium

WordPress WP Delicious plugin <= 1.9.5 - Broken Access Control vulnerability
- WP Delicious
- Broken access control
Not analysed yet 8 Apr 2026
CVE-2025-67548 CVE record

CVSS 6.5 Medium

WordPress WP Delicious plugin <= 1.9.1 - Broken Access Control vulnerability
- WP Delicious
- Broken access control
Not analysed yet 9 Dec 2025
CVE-2025-58605 CVE record

CVSS 6.5 Medium

WordPress WP Delicious Plugin <= 1.8.7 - Cross Site Scripting (XSS) Vulnerability
- WP Delicious
- Cross-site scripting (XSS)
Not analysed yet 3 Sept 2025
CVE-2025-54023 CVE record

CVSS 6.5 Medium

WordPress WP Delicious plugin <= 1.8.4 - Cross Site Scripting (XSS) Vulnerability
- WP Delicious
- Cross-site scripting (XSS)
Not analysed yet 16 Jul 2025