Volerion logoVolerion
Volerion logoVolerion

Tainacan WordPress Plugin Path Traversal Vulnerability Allowing Arbitrary File Deletion

Vulnerability

A path traversal vulnerability has been identified in the Tainacan WordPress plugin, allowing for arbitrary file deletion. This issue affects versions of the plugin through 0.21.14.

Impact

Exploitation of this vulnerability could lead to the deletion of arbitrary files from the WordPress installation. If core files are removed, it may disrupt the functionality of the website.

Remediation

Users of the Tainacan WordPress plugin should update to version 0.21.15 or later. Patchstack users can enable auto-update for vulnerable plugins.

Added: Jun 5, 2025, 11:42 PM
Updated: Jun 6, 2025, 12:16 AM

Vulnerability Rating

Custom Algorithm
spread
1.0
impact
2.5
exploitability
7.6
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.