Tainacan WordPress Plugin Information Exposure Vulnerability

A vulnerability allowing information exposure exists in the Tainacan plugin for WordPress, affecting all versions through 1.0.0. The issue arises because uploaded files marked as private are exposed in the wp-content directory without proper protection. This flaw enables unauthenticated attackers to access potentially sensitive information from files designated as private.

Impact

Exploitation of this vulnerability could lead to unauthorized access to private files, allowing attackers to retrieve sensitive information intended to be confidential.

Remediation

Users can update to Tainacan version 1.0.1 or a newer patched version to address this vulnerability.