Is CVE-2026-110026 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-110026?

CVE-2026-110026 has a CVSS v3 severity of MEDIUM (4.9).

Back

CVE-2026-110026

Description

The Tasty Recipes Lite WordPress plugin before 1.2.11 does not correctly check user capabilities when creating, renaming and deleting taxonomy terms, allowing users with a role as low as Contributor to add, rename and permanently delete terms in any taxonomy on the site, including categories, tags and navigation menus.