What is CVE-2026-14305?

CVE-2026-14305 is a medium-severity vulnerability in Wp Delicious, classified under Improper Authentication. CVSS score: 5.3/10. Published 2026-07-30.

How severe is CVE-2026-14305?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Auth bypass in Wp Delicious

CVE-2026-14305

The WP Delicious WordPress plugin before 1.10.2 does not perform an authorization check on one of its AJAX actions, allowing unauthenticated users to modify limited post metadata (a like counter and an associated identifier list) on arbit…

Vulnerability class: Broken Authentication

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N.

Affected products

Unknown Wp Delicious — versions 0

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

contact@wpscan.com (technical-description, exploit, vdb-entry)

Frequently asked questions

What is CVE-2026-14305?: CVE-2026-14305 is a medium-severity vulnerability in Wp Delicious, classified under Improper Authentication. CVSS score: 5.3/10. Published 2026-07-30.
How severe is CVE-2026-14305?: Medium severity. CVSS v3 base score is 5.3 out of 10.