Access Control Issues in WP Delicious Plugin by Delicious Recipes
CVE-2026-39528

5.3MEDIUM

Key Information:

Vendor

WordPress
Status
WP Delicious
Vendor
CVE Published:
8 April 2026

What is CVE-2026-39528?

The WP Delicious Plugin, developed by Delicious Recipes, has a significant missing authorization vulnerability. This flaw permits attackers to exploit incorrectly configured access control settings, allowing unauthorized actions within the application. Affected versions include all prior to version 1.9.5, increasing risks for users who have not updated. It is crucial for website owners using this plugin to implement necessary patches as soon as possible to ensure the security of their sites.

Affected Version(s)

WP Delicious 0 <= 1.9.5

References

https://patchstack.com/database/Wordpress/Plugin/deliciou...
vdb-entry

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

hhhai | Patchstack Bug Bounty Program
.