Live › vulnerability › CVE-2026-110026
Go to dashboardThe Tasty Recipes Lite WordPress plugin before 1.2.11 does not check user capabilities when creating, renaming or deleting taxonomy terms. A logged-in user with the Contributor role can add, rename and permanently delete terms in any taxonomy, including categories, tags and navigation menus.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sites running the Tasty Recipes Lite plugin before 1.2.11 that have any account with the Contributor role or higher, since those accounts are the ones who can exploit the missing check. Sites without this plugin, or with it already at , are not affected.
1.2.11No product ranges from the sources yet.
1.2.111.2.11 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
The Tasty Recipes Lite WordPress plugin before 1.2.11 does not correctly check user capabilities when creating, renaming and deleting taxonomy terms, allowing users with a role as low as Contributor to add, rename and permanently delete terms in any taxonomy on the site, including categories, tags and navigation menus.
This page as .md · .json · in your agent: get_signal("CVE-2026-110026")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.