---
id: CVE-2026-110026
title: >-
  Tasty Recipes Lite 1.2 - 1.2.10 - Contributor+ Taxonomy Term Creation,
  Renaming and Deletion
summary: >-
  The Tasty Recipes Lite  WordPress plugin before 1.2.11 does not correctly
  check user capabilities when creating, renaming and deleting taxonomy terms,
  allowing users with a role as low as Contributor to add, rename and
  permanently delete…
severity: none
cwe:
  - CWE-862
product: Tasty Recipes Lite
affected:
  - tasty_recipes_lite >= 1.2 < 1.2.11
published: '2026-10-18'
updated: '2026-10-18'
sourceUpdated: '2026-10-18T06:00:15.022Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-110026'
references:
  - url: 'https://wpscan.com/vulnerability/fc8fc746-9ee1-4364-881f-28ff598f007c/'
tags:
  - cve.org
ingestedAt: '2026-10-18T06:38:27.435Z'
---

## Overview

The Tasty Recipes Lite  WordPress plugin before 1.2.11 does not correctly check user capabilities when creating, renaming and deleting taxonomy terms, allowing users with a role as low as Contributor to add, rename and permanently delete terms in any taxonomy on the site, including categories, tags and navigation menus.

## Affected

- `tasty_recipes_lite >= 1.2 < 1.2.11`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.