Cross-site Scripting Vulnerability in WP Delicious by Delicious Recipes

CVE-2025-54023

What is CVE-2025-54023?

The WP Delicious plugin by Delicious Recipes contains a vulnerability that allows for DOM-Based Cross-site Scripting (XSS) attacks. This flaw arises from improper neutralization of user input during the generation of web pages. Malicious actors can exploit this vulnerability to inject arbitrary scripts into web pages, potentially leading to unauthorized access, data theft, and the compromise of user sessions. Users of versions from n/a through 1.8.4 of the WP Delicious plugin are particularly at risk and should take immediate action to secure their installations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References