CVE-2025-60128

CVE-2025-60128 affects the Delisho WordPress plugin (Delisho – Recipe Widgets and Blocks) up to version 1.1.3. The issue is Missing Authorization allowing unauthorized updates to Options via wcmlim_settings_ajax_handler, as documented in the CVE entry and corroborated by the Wordfence vulnerabili...