wpdelicious
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) | 3 | – | Jul 16, 2026 |
Exploited and recent CVEs
- CVE-2026-15099 WP Delicious <= 1.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'steps' Block Attribute 0.3%
- CVE-2025-11755 Delicious Recipes <= 1.9.0 - Authenticated (Contributor+) Arbitrary File Upload 0.5%
- CVE-2024-7626 WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) <= 1.6.9 - Improper Path Validation to Authenticated (Subscriber+) Arbitrary File Move and Read 0.8%