CVE-2026-110026 PUBLISHED

Tasty Recipes Lite 1.2 - 1.2.10 - Contributor+ Taxonomy Term Creation, Renaming and Deletion

Assigner: WPScan
Reserved: 13.10.2026 Published: 18.10.2026 Updated: 18.10.2026

The Tasty Recipes Lite WordPress plugin before 1.2.11 does not correctly check user capabilities when creating, renaming and deleting taxonomy terms, allowing users with a role as low as Contributor to add, rename and permanently delete terms in any taxonomy on the site, including categories, tags and navigation menus.

Product Status

Vendor Unknown
Product Tasty Recipes Lite
Versions Default: unaffected
  • affected from 1.2 to 1.2.11 (excl.)

Credits

  • Usama Arshad finder
  • WPScan coordinator

References

Problem Types

  • CWE-862 Missing Authorization CWE