CVE-2025-54023

CVE-2025-54023 (WP Delicious) is a DOM-based Cross-Site Scripting vulnerability in the WordPress plugin WP Delicious (versions up to 1.8.4). The issue stems from improper input neutralization during web page generation, enabling attacker‑supplied content to be executed in the context of a user’s ...

PT-2025-29752 · WordPress · Wp Delicious

Name of the Vulnerable Software and Affected Versions: WP Delicious versions through 1.8.4 Description: WP Delicious is susceptible to a DOM-Based Cross-site Scripting issue due to improper neutralization of input during web page generation. This allows for potential malicious code execution with...

CVE-2024-51676

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Delicious Delisho dr-widgets-blocks allows DOM-Based XSS.This issue affects Delisho: from n/a through = 1.0.6...

CVE-2024-51676

CVE-2024-51676 is a Cross-Site Scripting (DOM-based XSS) vulnerability in the WordPress plugin Delisho (dr-widgets-blocks). It affects Delisho versions up to and including 1.0.6 and arises from improper input neutralization during web page generation. The issue has a CVSS v3.1 base score of 6.5 (...

CVE-2024-7626 WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) <= 1.6.9 - Improper Path Validation to Authenticated (Subscriber+) Arbitrary File Move and Read

The WP Delicious – Recipe Plugin for Food Bloggers formerly Delicious Recipes plugin for WordPress is vulnerable to arbitrary file movement and reading due to insufficient file path validation in the saveeditprofiledetails function in all versions up to, and including, 1.6.9. This makes it possib...

WordPress WP Delicious plugin <= 1.6.9 - Improper Path Validation to Authenticated (Subscriber+) Arbitrary File Move and Read vulnerability

Improper Path Validation to Authenticated Subscriber+ Arbitrary File Move and Read vulnerability discovered by Connor Billings in WordPress Plugin WP Delicious versions = 1.6.9...

WordPress plugin WP Delicious 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...