CVE-2025-26876 Details
Description
Path Traversal: '.../...//' vulnerability in CodeManas Search with Typesense search-with-typesense allows Path Traversal.This issue affects Search with Typesense: from n/a through <= 2.0.8.
A path traversal vulnerability exists in the WordPress plugin 'Search with Typesense' in versions through 2.0.8. This vulnerability allows attackers to manipulate file paths, potentially accessing restricted files on the server.
Users of the 'Search with Typesense' WordPress plugin should update to version 2.0.9 or later to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Feb 25, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-35 | Path Traversal: '.../...//' | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| codemanas search with typesense | < 2.0.9 |
CPE
Remediation
| |
Change History
9 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 23, 2026 | CVE Modified | [email protected] |
| Apr 1, 2026 | CVE Modified | [email protected] |
| Sep 30, 2025 | Modified Analysis | [email protected] |
| Aug 26, 2025 | CVE Modified | CISA-ADP |
| Jul 1, 2025 | Initial Analysis | [email protected] |
| Feb 25, 2025 | CVE Modified | CISA-ADP |
| Feb 25, 2025 | New CVE Received | [email protected] |