CVE-2026-110026: Tasty Recipes Lite 1.2 - 1.2.10 - Contributor+ Taxonomy Term Creation, Renaming and Deletion

Q: Who can exploit this issue?

Any authenticated user with at least the Contributor role can exploit it. The affected permissions allow that user to add, rename, or permanently delete terms across any site taxonomy, including categories, tags, and navigation menus.

Q: Which plugin versions are affected?

Tasty Recipes Lite versions 1.2 through 1.2.10 are affected. Version 1.2.11 is not described as affected.

Q: How can I determine whether my site may have been affected?

Review taxonomy terms for unexpected additions, renamed terms, or deleted terms, including categories, tags, and navigation-menu terms. Also review accounts assigned the Contributor role or higher, since those users could perform the actions.

Published Oct 18, 2026

Updated

The Tasty Recipes Lite WordPress plugin before 1.2.11 does not correctly check user capabilities when creating, renaming and deleting taxonomy terms, allowing users with a role as low as Contributor to add, rename and permanently delete terms in any taxonomy on the site, including categories, tags and navigation menus.

Affected Software

1 affected component

WP Tasty Tasty Recipes Lite<1.2.11

Event History

Oct 18, 2026

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

DescriptionWeakness

Data Sourced

via NVD·07:16 AM

Description

Frequently Asked Questions

Who can exploit this issue?

Any authenticated user with at least the Contributor role can exploit it. The affected permissions allow that user to add, rename, or permanently delete terms across any site taxonomy, including categories, tags, and navigation menus.

Which plugin versions are affected?

Tasty Recipes Lite versions 1.2 through 1.2.10 are affected. Version 1.2.11 is not described as affected.

How can I determine whether my site may have been affected?

Review taxonomy terms for unexpected additions, renamed terms, or deleted terms, including categories, tags, and navigation-menu terms. Also review accounts assigned the Contributor role or higher, since those users could perform the actions.

CVE-2026-110026: Tasty Recipes Lite 1.2 - 1.2.10 - Contributor+ Taxonomy Term Creation, Renaming and Deletion

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

Which plugin versions are affected?

How can I determine whether my site may have been affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

Which plugin versions are affected?

How can I determine whether my site may have been affected?