Information Exposure Vulnerability in Tainacan Plugin for WordPress

CVE-2025-12747

What is CVE-2025-12747?

The Tainacan plugin for WordPress has a vulnerability that allows unauthenticated attackers to access private files uploaded by users. These files, intended to be protected, are stored in the wp-content directory without sufficient security measures, leading to potential exposure of sensitive information. This issue affects all versions of the plugin up to and including version 1.0.0, highlighting the need for immediate updates to safeguard data.

References