TA
Product
Tainacan
14
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 2High 3Medium 9Low 0
Watch
Add Tainacan to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-93767 | 6.5 | Oct 16 | Tainacan <= 1.3.0 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Read via 'guid' Parameter Affected: through 1.3.0 |
| CVE-2024-13236 | 6.5 | Jan 23 | The Tainacan plugin for WordPress is vulnerable to SQL Injection via the 'collection_id' parameter in all versions up to, and including, 0.21.12 due to insufficient escaping on… Affected: before 0.21.13 |
| CVE-2024-48040 | 6.5 | Oct 11 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tainacan Tainacan tainacan allows SQL Injection.This issue affects Tainacan:… Affected: before 0.21.9 |
| CVE-2024-7135 | 6.5 | Jul 31 | The Tainacan plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'get_file' function in all versions up to, and including,… Affected: before 0.21.8 |
| CVE-2024-9221 | 6.1 | Oct 11 | The Tainacan plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to,… Affected: before 0.21.11 |
| CVE-2024-34794 | 6.1 | Jun 3 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tainacan Tainacan tainacan.This issue affects Tainacan: from n/a through <=… Affected: before 0.21.4 |
| CVE-2023-47848 | 6.1 | Nov 30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tainacan.Org Tainacan allows Reflected XSS.This issue affects Tainacan: from… Affected: through 0.20.4 |
| CVE-2024-34795 | 5.4 | Jun 3 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tainacan Tainacan tainacan.This issue affects Tainacan: from n/a through <=… Affected: before 0.21.4 |
| CVE-2026-104743 New | 4.9 | Oct 28 | Tainacan <= 1.3.0 - Authenticated (Editor+) Path Traversal to Arbitrary File Read via 'tmp_file' Parameter via Mass Assignment Affected: through 1.3.0 |
Showing 9