Directory Traversal Vulnerability in Tainacan Plugin for WordPress

CVE-2026-93767

What is CVE-2026-93767?

The Tainacan plugin for WordPress presents a directory traversal vulnerability that allows authenticated users with subscriber-level access or higher to read arbitrary files on the server. This issue arises due to improper validation of the 'guid' parameter, specifically when the uploads/tainacan directory is absent, leading the realpath() function to return false. Consequently, this flaw compromises the containment check, exposing sensitive information stored in files that should remain private. It is critical for site administrators using Tainacan to ensure they update their installation to mitigate this risk.

References