Wp Delicious

1 CVEs product

Monthly

CVE-2026-39528 MEDIUM This Month

Missing authorization in WP Delicious WordPress plugin versions up to 1.9.5 enables unauthenticated remote attackers to bypass access controls and read sensitive information due to incorrectly configured access restrictions. The vulnerability allows unauthorized information disclosure with low CVSS impact (5.3) but affects a widely deployed WordPress plugin; exploitation likelihood is minimal (EPSS 0.02%, percentile 4%) and no public exploit code has been identified.

Authentication Bypass Wp Delicious
NVD
CVSS 3.1
5.3
EPSS
0.0%
CVE-2026-39528
EPSS 0% CVSS 5.3
MEDIUM This Month

Missing authorization in WP Delicious WordPress plugin versions up to 1.9.5 enables unauthenticated remote attackers to bypass access controls and read sensitive information due to incorrectly configured access restrictions. The vulnerability allows unauthorized information disclosure with low CVSS impact (5.3) but affects a widely deployed WordPress plugin; exploitation likelihood is minimal (EPSS 0.02%, percentile 4%) and no public exploit code has been identified.

Authentication Bypass Wp Delicious
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy