CVE-2026-104743Published
Tainacan <= 1.3.0 - Authenticated (Editor+) Path Traversal to Arbitrary File Read via 'tmp_file' Parameter via Mass Assignment
Exact source revision recorded 28 Oct 2026 08:06:08 UTC. It does not establish the source's current position. Latest evidence.
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-104743 · Microsoft / collected KEV context
cve-program · CVE-2026-104743
- https://www.wordfence.com/threat-intel/vulnerabilities/id/e16bda6d-0818-468b-9114-82a8f5f68caf?source=cve
- https://plugins.trac.wordpress.org/browser/tainacan/tags/1.3.0/classes/api/endpoints/class-tainacan-rest-importers-controller.php#L223
- https://plugins.trac.wordpress.org/browser/tainacan/tags/1.3.0/classes/background-process/importer/class-tainacan-importer.php#L255
- https://plugins.trac.wordpress.org/browser/tainacan/tags/1.3.0/classes/background-process/importer/class-tainacan-csv.php#L36
- https://plugins.trac.wordpress.org/browser/tainacan/tags/1.3.0/classes/background-process/importer/class-tainacan-csv.php#L334
- https://plugins.trac.wordpress.org/browser/tainacan/tags/1.3.0/classes/background-process/importer/class-tainacan-csv.php#L93
- https://plugins.trac.wordpress.org/browser/tainacan/tags/1.3.0/classes/api/endpoints/class-tainacan-rest-importers-controller.php#L190
- https://plugins.trac.wordpress.org/browser/tainacan/tags/1.3.0/classes/api/endpoints/class-tainacan-rest-importers-controller.php#L266
- https://plugins.trac.wordpress.org/browser/tainacan/tags/1.3.0/classes/api/endpoints/class-tainacan-rest-importers-controller.php#L146
- https://github.com/tainacan/tainacan/commit/1cc2c179d213670ae4bd378473d6fecbc35c6357
- https://plugins.trac.wordpress.org/browser/tainacan/tags/1.4.0/classes/api/endpoints/class-tainacan-rest-importers-controller.php
Current operational correlations are not mixed into this historical source record. Open latest evidence to discover current connections.