What’s Vulnerable › Products

wpdelicious WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your wpdelicious WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) version is affected

Latest wpdelicious WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) vulnerabilities

• CVE-2026-15099 — WP Delicious <= 1.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'steps' Block Attribute (CVSS 6.4)
• CVE-2025-11755 — Delicious Recipes <= 1.9.0 - Authenticated (Contributor+) Arbitrary File Upload (CVSS 8.8)
• CVE-2022-4974 — Freemius SDK <= 2.4.2 - Missing Authorization Checks (CVSS 6.3)
• CVE-2024-7626 — WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) <= 1.6.9 - Improper Path Validation to Authenticated (Subscriber+) Arbitrary File Move and Read (CVSS 8.1)
• CVE-2024-43935 — WordPress WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) plugin <= 1.6.7 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)