Plugin icon

WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes)

delicious-recipes

Vulnerabilities:

12

Last Updated:

October 8, 2026

Active Installs:

4000

Published
Title
Fixed in
CVSS
Published
2026-09-24
Title
WP Delicious < 1.10.8 - Contributor+ Stored XSS via Recipe Block Tag Name
Fixed in
Fixed in 1.10.8
CVSS
6.8 (medium)
Published
2026-07-15
Title
WP Delicious < 1.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'steps' Block Attribute
Fixed in
Fixed in 1.10.3
CVSS
5.5 (medium)
Published
2026-07-13
Title
WP Delicious < 1.10.2 - Unauthenticated Arbitrary Post Meta Update via recipe_likes
Fixed in
Fixed in 1.10.2
CVSS
5.3 (medium)
Published
2026-02-25
Title
Delicious < 1.9.6 - Missing Authorization
Fixed in
Fixed in 1.9.6
CVSS
5.3 (medium)
Published
2025-11-09
Title
WP Delicious < 1.9.2 - Missing Authorization
Fixed in
Fixed in 1.9.2
CVSS
4.3 (medium)
Published
2025-10-31
Title
Delicious Recipes < 1.9.1 - Authenticated (Contributor+) Arbitrary File Upload
Fixed in
Fixed in 1.9.1
CVSS
8.8 (high)
Published
2025-09-03
Title
WP Delicious < 1.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.8.8
CVSS
6.4 (medium)
Published
2025-07-16
Title
WP Delicious < 1.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.8.5
CVSS
6.4 (medium)
Published
2024-09-10
Title
WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) < 1.7.0 - Improper Path Validation to Authenticated (Subscriber+) Arbitrary File Move and Read
Fixed in
Fixed in 1.7.0
CVSS
8.1 (high)
Published
2024-08-26
Title
Delicious Recipes – WordPress Recipe Plugin < 1.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.6.8
CVSS
6.4 (medium)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.5.3
CVSS
6.1 (medium)
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Fixed in
Fixed in 1.3.5
CVSS
4.3 (medium)