CVE-2026-4128

Summary: The TP Restore Categories And Taxonomies plugin for WordPress is vulnerable to Missing Authorization in all versions up to 1.0.1. The delete_term() AJAX handler does not perform a proper capability check (e.g., current_user_can()) to verify permissions. Although a nonce is checked via ch...