Tainacan vulnerabilities

Products

• Tainacan 20

Newest

• tainacan Tainacan <= 1.3.0 - Authenticated (Editor+) Path Traversal to Arbitrary File Read via 'tmp_file' Parameter via Mass Assignment CVE-2026-104743 4.9 MediumOctober 28, 2026
• tainacan Tainacan <= 1.3.0 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Read via 'guid' Parameter CVE-2026-93767 6.5 MediumOctober 16, 2026
• tainacan Tainacan < 1.4.0 - Subscriber+ Repository Staff Email Address Disclosure via Reports REST Endpoints CVE-2026-90989 4.3 MediumOctober 14, 2026
• tainacan WordPress Tainacan plugin <= 1.3.0 - PHP Object Injection vulnerability CVE-2026-94676 7.2 HighOctober 10, 2026
• tainacan WordPress Tainacan plugin <= 1.2.0 - SQL Injection vulnerability CVE-2026-95590 7.1 HighSeptember 23, 2026
• tainacan Tainacan <= 1.0.3 - Unauthenticated SQL Injection via 'geoquery' REST API Parameter CVE-2026-6230 7.5 HighJuly 8, 2026
• tainacan WordPress Tainacan plugin <= 1.0.3 - SQL Injection vulnerability CVE-2026-42740 9.3 CriticalMay 27, 2026
• tainacan Tainacan <= 1.0.1 - Missing Authorization to Unauthenticated Arbitrary Metadata Section Creation CVE-2025-14043 5.3 MediumDecember 21, 2025
• tainacan Tainacan <= 1.0.0 - Unauthenticated Information Exposure CVE-2025-12747 5.3 MediumNovember 21, 2025
• tainacan Tainacan <= 1.0.0 - Reflected Cross-Site Scripting CVE-2025-12746 6.1 MediumNovember 21, 2025
• tainacan WordPress Tainacan plugin <= 0.21.14 - Arbitrary File Deletion vulnerability CVE-2025-47512 8.6 HighMay 23, 2025
• tainacan tainá WordPress Tainá plugin <= 0.2.2 - Cross Site Scripting (XSS) vulnerability CVE-2025-26919 6.5 MediumApril 15, 2025
• tainacan Tainacan <= 0.21.12 - Authenticated (Subscriber+) SQL Injection CVE-2024-13236 6.5 MediumJanuary 23, 2025
• tainacan WordPress Tainacan plugin <= 0.21.8 - SQL Injection vulnerability CVE-2024-48040 8.5 HighOctober 11, 2024
• leogermani tainacan Tainacan <= 0.21.10 - Reflected Cross-Site Scripting CVE-2024-9221 6.1 MediumOctober 11, 2024
• tainacan Tainacan <= 0.21.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read CVE-2024-7135 Public exploit 6.5 MediumJuly 31, 2024
• tainacan WordPress Tainacan plugin <= 0.20.7 - Broken Access Control vulnerability CVE-2024-30529 5.3 MediumJune 9, 2024
• tainacan WordPress Tainacan plugin <= 0.21.3 - Cross Site Scripting (XSS) vulnerability CVE-2024-34794 7.1 HighJune 3, 2024
• tainacan WordPress Tainacan plugin <= 0.21.3 - Cross Site Scripting (XSS) vulnerability CVE-2024-34795 6.5 MediumJune 3, 2024
• tainacan interface Tainacan Interface <= 2.7.2 - Reflected Cross-Site Scripting CVE-2024-3867 Public exploit 6.1 MediumApril 16, 2024
• tainacan WordPress Tainacan plugin <= 0.20.6 - Sensitive Data Exposure via Log File vulnerability CVE-2024-1435 5.3 MediumFebruary 29, 2024
• tainacan WordPress Tainacan Plugin <= 0.20.4 is vulnerable to Cross Site Scripting (XSS) CVE-2023-47848 7.1 HighNovember 30, 2023