CVE-2024-7135

The Tainacan plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'get_file' function in all versions up to, and including, 0.21.7. The function is also vulnerable to directory traversal. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.

• CWE-862
• CWE-862

• https://plugins.trac.wordpress.org/browser/tainacan/trunk/classes/api/endpoints/class-tainacan-rest-background-processes-controller.php#L370Product
• https://plugins.trac.wordpress.org/browser/tainacan/trunk/classes/api/endpoints/class-tainacan-rest-background-processes-controller.php#L378Product
• https://plugins.trac.wordpress.org/changeset/3127693/Patch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/e4dd0c6a-75af-4b53-ac13-fc4ef0e9001d?source=cveThird Party Advisory

Published

Jul 31, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-7129The Appointment Booking Calendar WordPress plugin before 1.6…7.2
• CVE-2024-7130Improper Neutralization of Input During Web Page Generation …5.5
• CVE-2024-7131Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2024-7132The Page Builder Gutenberg Blocks WordPress plugin before 3…4.8
• CVE-2024-7133The Floating Notification Bar, Sticky Menu on Scroll, Announ…4.8
• CVE-2024-7134The LiquidPoll – Polls, Surveys, NPS and Feedback Reviews pl…7.2
• CVE-2024-7136The JetSearch plugin for WordPress is vulnerable to Stored C…6.4
• CVE-2024-7137The L2CAP receive data buffer for L2CAP packets is restricte…6.5
• CVE-2024-7138An assert may be triggered, causing a temporary denial of se…6.5
• CVE-2024-7139Due to an unchecked buffer length, a specially crafted L2CAP…6.5
• CVE-2024-7141Versions of Gliffy Online prior to versions 4.14.0-7 contain…5.9
• CVE-2024-7142On Arista CloudVision Appliance (CVA) affected releases runn…4.6