Path Traversal Flaw in CodeManas Search for Typesense
CVE-2025-26876

6.8MEDIUM

Key Information:

Vendor

WordPress
Status
Search With Typesense
Vendor
CVE Published:
25 February 2025

What is CVE-2025-26876?

A Path Traversal vulnerability exists in the CodeManas Search plugin for Typesense, allowing unauthorized access to files outside the intended directory structure. This flaw affects versions from n/a to 2.0.8, posing risks of sensitive information exposure for users of the plugin. It is crucial for administrators to assess their installations and apply necessary mitigations to protect their systems.

Affected Version(s)

Search with Typesense <= 2.0.8

References

https://patchstack.com/database/wordpress/plugin/search-w...
vdb-entry

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

astra.r3verii (Patchstack Alliance)
.