CVE-2026-93767 | Tainacan Plugin up to 1.3.0 on WordPress uploads/tainacan realpath guid path traversal

October 16, 2026 Yanac

A vulnerability was found in Tainacan Plugin up to 1.3.0 on WordPress. It has been declared as problematic. Impacted is the function realpath of the file uploads/tainacan. The manipulation of the argument guid results in path traversal.

This vulnerability is known as CVE-2026-93767. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More