CVE-2026-39528

MediumCVSS 5.3

Published: 08/04/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.23%

14th percentile - higher than 14% of all known CVEs

Summary

The WP Delicious plugin contains a missing authorization vulnerability that allows exploiting incorrectly configured access control security levels. This issue affects all versions from n/a through 1.9.5.

Risk Assessment

An attacker can gain unauthorized access to recipe management functions or other protected resources, potentially leading to data leakage or content manipulation.

Recommendation

Immediately update the WP Delicious plugin to the latest version and verify access control configuration.

Original NVD description (English source)

Missing Authorization vulnerability in WP Delicious WP Delicious delicious-recipes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Delicious: from n/a through <= 1.9.5.