Threats tagged 'ghsa-c6q3-c35r-7vcf'

The Tainacan WordPress plugin versions up to and including 1.0.0 have an information exposure vulnerability. Uploaded files marked as private are stored in the wp-content directory without sufficient access controls, allowing unauthenticated attackers to access potentially sensitive private files.