What is GHSA-38jf-fw6r-5vcj?

GHSA-38jf-fw6r-5vcj is a security advisory published by GitHub Security Advisories with Medium severity. The Tasty Recipes Lite WordPress plugin before 1.2.11 does not correctly check user capabilities...

Which CVE IDs does GHSA-38jf-fw6r-5vcj cover?

GHSA-38jf-fw6r-5vcj covers the following CVE IDs: CVE-2026-110026. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-38jf-fw6r-5vcj?

GHSA-38jf-fw6r-5vcj has a CVSS v3 base score of 4.9, published by GitHub Security Advisories.

GHSA-38jf-fw6r-5vcjMediumCVSS 4.9

The Tasty Recipes Lite WordPress plugin before 1.2.11 does not correctly check user capabilities...

Vendor

GitHub Security Advisories

Published

October 18, 2026

Last Modified

October 18, 2026

🔗 CVE IDs covered (1)

CVE-2026-110026 →

📋 Description

The Tasty Recipes Lite WordPress plugin before 1.2.11 does not correctly check user capabilities when creating, renaming and deleting taxonomy terms, allowing users with a role as low as Contributor to add, rename and permanently delete terms in any taxonomy on the site, including categories, tags and navigation menus.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-110026
https://wpscan.com/vulnerability/fc8fc746-9ee1-4364-881f-28ff598f007c
https://github.com/advisories/GHSA-38jf-fw6r-5vcj