CVE-2025-60128

CVE-2025-60128 affects the Delisho WordPress plugin (Delisho – Recipe Widgets and Blocks) up to version 1.1.3. The issue is Missing Authorization allowing unauthorized updates to Options via wcmlim_settings_ajax_handler, as documented in the CVE entry and corroborated by the Wordfence vulnerabili...

PT-2025-39575

Name of the Vulnerable Software and Affected Versions WP Delicious Delisho versions through 1.1.3 Description An authorization issue exists in WP Delicious Delisho, allowing exploitation of incorrectly configured access control security levels. Recommendations Update WP Delicious Delisho to a...