CVE-2026-14305

The CVE-2026-14305 entry concerns the WP Delicious WordPress plugin (pre-1.10.2). A missing authorization check on one of an AJAX actions allows unauthenticated users to modify limited post metadata (a like counter and an associated identifier list) on arbitrary posts, potentially inflating the c...