https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 23:24:56 +0000 https://cve.radiocsirt.org/vuln/cve-2026-4128 <p><strong>Affected:</strong> tplugins TP Restore Categories And Taxonomies</p> <p>The TP Restore Categories And Taxonomies plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.1. The delete_term() function, which handles the &#39;tpmcattt_delete_term&#39; AJAX action, does not perform any capability check (e.g., current_user_can()) to verify the user has sufficient permissions. While it does verify a nonce via check_ajax_referer(), this nonce is generated for all authenticated users via the admin_enqueue_scripts hook and exposed on any wp-admin page (including profile.php, which subscribers can access). This makes it possible for authenticated attackers, with Subscriber-level access and above, to permanently delete taxonomy term records from the plugin&#39;s trash/backup tables by sending a crafted AJAX request with a valid nonce and an arbitrary term_id.</p> <p><strong>Affected:</strong> tplugins TP Restore Categories And Taxonomies</p> <p>The TP Restore Categories And Taxonomies plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.1. The delete_term() function, which handles the &#39;tpmcattt_delete_term&#39; AJAX action, does not perform any capability check (e.g., current_user_can()) to verify the user has sufficient permissions. While it does verify a nonce via check_ajax_referer(), this nonce is generated for all authenticated users via the admin_enqueue_scripts hook and exposed on any wp-admin page (including profile.php, which subscribers can access). This makes it possible for authenticated attackers, with Subscriber-level access and above, to permanently delete taxonomy term records from the plugin&#39;s trash/backup tables by sending a crafted AJAX request with a valid nonce and an arbitrary term_id.</p> https://cve.radiocsirt.org/vuln/cve-2026-4128