CVE-2026-110026
CVE-2026-110026 · Tasty Recipes Lite 1.2 - 1.2.10 - Contributor+ Taxonomy Term Creation, Renaming and Deletion
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The Tasty Recipes Lite WordPress plugin before 1.2.11 does not correctly check user capabilities when creating, renaming and deleting taxonomy terms, allowing users with a role as low as Contributor to add, rename and permanently delete terms in any taxonomy on the site, including categories, tags and navigation menus.
CVSS 4.9 · Medium · EPSS 0.2% · Fix available
- Published
- Updated
Affected products and versions
tasty recipes lite
- Versions
- ≥ 1.2, < 1.2.11: Affected (semver)
Update to 1.2.11