Cross-site Scripting Vulnerability in WP Delicious by Patchstack

CVE-2025-58605

What is CVE-2025-58605?

The WP Delicious plugin is susceptible to a Cross-site Scripting (XSS) vulnerability that allows for the storage of malicious scripts in the database. An attacker can exploit this flaw by injecting harmful scripts, which are then executed in the web browsers of users interacting with the affected application. This exploitation can lead to significant security risks, including stealing sensitive user data and compromising user sessions. Users of WP Delicious versions within the range of n/a to 1.8.7 are encouraged to take immediate action to mitigate this vulnerability.

References