wpdelicious vulnerabilities

4 published CVEs name wpdelicious among the affected products.

Critical 0High 2Medium 2Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2026-15099
WP Delicious <= 1.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'steps' Block Attribute
wpdelicious · WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes)
Medium6.4
CVE-2025-11755
Delicious Recipes <= 1.9.0 - Authenticated (Contributor+) Arbitrary File Upload
wpdelicious · WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes)
High8.8
CVE-2022-4974
Freemius SDK <= 2.4.2 - Missing Authorization Checks
dashlabsltd · YASR – Yet Another Star Rating Plugin for WordPress
Medium6.3
CVE-2024-7626
WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) <= 1.6.9 - Improper Path Validation to Authenticated (Subscriber+) Arbitrary File Move and Read
wpdelicious · WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes)
High8.1