TA
Product
Tainacan
14
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 2High 3Medium 9Low 0
Watch
Add Tainacan to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-30529 | 9.8 | Jun 9 | Missing Authorization vulnerability in tainacan Tainacan tainacan.This issue affects Tainacan: from n/a through <= 0.20.7 Affected: before 0.20.8 |
| CVE-2026-42740 | 9.3 | May 27 | WordPress Tainacan plugin <= 1.0.3 - SQL Injection vulnerability Affected: through 1.0.3 |
| CVE-2026-6230 | 7.5 | Jul 8 | Tainacan <= 1.0.3 - Unauthenticated SQL Injection via 'geoquery' REST API Parameter Affected: through 1.0.3 |
| CVE-2024-1435 | 7.5 | Feb 29 | Insertion of Sensitive Information Into Sent Data vulnerability in tainacan Tainacan tainacan.This issue affects Tainacan: from n/a through <= 0.20.6 Affected: before 0.20.7 |
| CVE-2026-95590 | 7.1 | Sep 23 | WordPress Tainacan plugin <= 1.2.0 - SQL Injection vulnerability Affected: through 1.2.0 |
| CVE-2026-93767 | 6.5 | Oct 16 | Tainacan <= 1.3.0 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Read via 'guid' Parameter Affected: through 1.3.0 |
| CVE-2024-13236 | 6.5 | Jan 23 | The Tainacan plugin for WordPress is vulnerable to SQL Injection via the 'collection_id' parameter in all versions up to, and including, 0.21.12 due to insufficient escaping on… Affected: before 0.21.13 |
| CVE-2024-48040 | 6.5 | Oct 11 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tainacan Tainacan tainacan allows SQL Injection.This issue affects Tainacan:… Affected: before 0.21.9 |
| CVE-2024-7135 | 6.5 | Jul 31 | The Tainacan plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'get_file' function in all versions up to, and including,… Affected: before 0.21.8 |
| CVE-2024-9221 | 6.1 | Oct 11 | The Tainacan plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to,… Affected: before 0.21.11 |
| CVE-2024-34794 | 6.1 | Jun 3 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tainacan Tainacan tainacan.This issue affects Tainacan: from n/a through <=… Affected: before 0.21.4 |
| CVE-2023-47848 | 6.1 | Nov 30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tainacan.Org Tainacan allows Reflected XSS.This issue affects Tainacan: from… Affected: through 0.20.4 |
| CVE-2024-34795 | 5.4 | Jun 3 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tainacan Tainacan tainacan.This issue affects Tainacan: from n/a through <=… Affected: before 0.21.4 |
| CVE-2026-104743 New | 4.9 | Oct 28 | Tainacan <= 1.3.0 - Authenticated (Editor+) Path Traversal to Arbitrary File Read via 'tmp_file' Parameter via Mass Assignment Affected: through 1.3.0 |
Showing 14