Cross-site Scripting Vulnerability in WP Delicious by Delicious Recipes

CVE-2025-54023

What is CVE-2025-54023?

The WP Delicious plugin by Delicious Recipes contains a vulnerability that allows for DOM-Based Cross-site Scripting (XSS) attacks. This flaw arises from improper neutralization of user input during the generation of web pages. Malicious actors can exploit this vulnerability to inject arbitrary scripts into web pages, potentially leading to unauthorized access, data theft, and the compromise of user sessions. Users of versions from n/a through 1.8.4 of the WP Delicious plugin are particularly at risk and should take immediate action to secure their installations.

References