4.9
Medium
CVE-2026-110026 The Tasty Recipes Lite WordPress plugin before 1.2.11 does not correctly check user capabilities when creating,…
Description
The Tasty Recipes Lite WordPress plugin before 1.2.11 does not correctly check user capabilities when creating, renaming and deleting taxonomy terms, allowing users with a role as low as Contributor to add, rename and permanently delete terms in any taxonomy on the site, including categories, tags and navigation menus.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Tasty Recipes Lite 1.2 | 1.2 → < 1.2.11 | 1.2.11 |