PT-2025-29752 · WordPress · Wp Delicious

Zaim · Published 2025-07-16 · Updated 2025-07-16 · CVE-2025-54023

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions WP Delicious versions through 1.8.4

Description WP Delicious is susceptible to a DOM-Based Cross-site Scripting issue due to improper neutralization of input during web page generation. This allows for potential malicious code execution within the context of the user's browser.

Recommendations Update WP Delicious to a version later than 1.8.4.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-54023

Affected Products

Wp Delicious

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-54023 · Security Note
• https://twitter.com/CVEnew/status/1945435450619068902 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/delicious-recipes/vulnerability/wordpress-wp-delicious-plugin-1-8-4-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/wordpress/plugin/delicious-recipes/vulnerability/wordpress-wp-delicious-plugin-1-8-4-cross-site-scripting-xss-vulnerability?_s_id=cve · Note