Skip to content
OpenAdvisories

Vendor

WP Delicious

10 known vulnerabilities.

Products

WP Delicious 4 WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) 3 Delisho 2 Delicious Recipes – WordPress Recipe Plugin 1
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-15099

    WP Delicious <= 1.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'steps' Block Attribute

    The Delicious Recipes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'steps' block attribute in versions up to, and including, 1.10.2. This is due to insufficient input sanitization and output escaping in the wrap_direction_text() f…

    WP Delicious WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) Web / CMS
  • Medium 5.3
    CVE-2026-39528

    WordPress WP Delicious plugin <= 1.9.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP Delicious WP Delicious delicious-recipes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Delicious: from n/a through <= 1.9.5.

    WP Delicious WP Delicious
  • Medium 6.5
    CVE-2025-67548

    WordPress WP Delicious plugin <= 1.9.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP Delicious WP Delicious delicious-recipes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Delicious: from n/a through <= 1.9.1.

    WP Delicious WP Delicious
  • Medium 4.3
    CVE-2025-60128

    WordPress Delisho Plugin <= 1.1.3 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in WP Delicious Delisho dr-widgets-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Delisho: from n/a through <= 1.1.3.

    WP Delicious Delisho
  • Medium 6.5
    CVE-2025-58605

    WordPress WP Delicious Plugin <= 1.8.7 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Delicious WP Delicious delicious-recipes allows Stored XSS.This issue affects WP Delicious: from n/a through <= 1.8.7.

    WP Delicious WP Delicious
  • Medium 6.5
    CVE-2025-54023

    WordPress WP Delicious plugin <= 1.8.4 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Delicious WP Delicious delicious-recipes allows DOM-Based XSS.This issue affects WP Delicious: from n/a through <= 1.8.4.

    WP Delicious WP Delicious
  • Medium 6.5
    CVE-2024-51676

    WordPress Delisho plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Delicious Delisho dr-widgets-blocks allows DOM-Based XSS.This issue affects Delisho: from n/a through <= 1.0.6.

    WP Delicious Delisho
  • Medium 6.5
    CVE-2024-43935

    WordPress WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) plugin <= 1.6.7 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WP Delicious Delicious Recipes – WordPress Recipe Plugin allows Stored XSS.This issue affects Delicious Recipes – WordPress Recipe Plugin: from n/a th…

    WP Delicious Delicious Recipes – WordPress Recipe Plugin Web / CMS