CVE-2026-15099 | wpdelicious WP Delicious Plugin up to 1.10.2 on WordPress Link wrap_direction_text href cross site scripting

July 16, 2026 Yanac

A vulnerability categorized as problematic has been discovered in wpdelicious WP Delicious Plugin up to 1.10.2 on WordPress. This vulnerability affects the function wrap_direction_text of the component Link Handler. Executing a manipulation of the argument href can lead to cross site scripting.

This vulnerability is tracked as CVE-2026-15099. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More