CVE-2025-67548
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
The WP Delicious (delicious-recipes) plugin in versions up to 1.9.1 contains a missing authorization vulnerability. This allows exploitation of incorrectly configured access control security levels.
Risk Assessment
Unauthorized users may perform operations reserved for higher privileges, potentially leading to data modification or leakage. The risk affects WordPress sites with the plugin installed.
Recommendation
Update the WP Delicious plugin to a version newer than 1.9.1. Verify user permission configuration in WordPress.
Other vulnerabilities in WP Delicious
See all- CVE-2026-39528Medium
The WP Delicious plugin contains a missing authorization vulnerability that allows exploiting incorrectly configured access control security levels. This issue affects all versions from n/a through 1.9.5.
- CVE-2025-58605Medium
The WP Delicious plugin through version 1.8.7 contains a Stored XSS vulnerability due to improper neutralization of input during web page generation. A malicious script is stored and executed in users' browsers.
Original NVD description (English source)
Missing Authorization vulnerability in WP Delicious WP Delicious delicious-recipes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Delicious: from n/a through <= 1.9.1.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS