Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.3
CVE-2026-39528: WP Delicious: Unauthorized access to sensitive data through incorrect settings
CVE-2026-39528 · published 7 months ago
Summary
The WP Delicious plugin has a security issue that allows unauthorized access to sensitive data if the access control settings are not configured correctly. This means that someone with improper permissions could view or modify data they shouldn't have access to. To fix this, update the WP Delicious plugin to version 1.9.6 or later.
Original advisory text
Missing Authorization vulnerability in WP Delicious WP Delicious delicious-recipes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Delicious: from n/a ...
Missing Authorization vulnerability in WP Delicious WP Delicious delicious-recipes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Delicious: from n/a through <= 1.9.5.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker partial control
Severity
5.3
Medium
Type
CWE-862Missing Authorization
Timeline
Published8 Apr 2026
Updated4 Nov 2026
First seen8 Apr 2026
Sources
CVE-2026-39528 · NVD
Track software like this
Free during beta