TA
Vendor
tainacan
14
CVEs
0
On KEV
2
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-104743 New | TA Tainacan tainacan | 4.9 | Oct 28 | Tainacan <= 1.3.0 - Authenticated (Editor+) Path Traversal to Arbitrary File Read via 'tmp_file' Parameter via Mass Assignment |
| CVE-2026-93767 | TA Tainacan tainacan | 6.5 | Oct 16 | Tainacan <= 1.3.0 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Read via 'guid' Parameter |
| CVE-2026-95590 | TA Tainacan tainacan | 7.1 | Sep 23 | WordPress Tainacan plugin <= 1.2.0 - SQL Injection vulnerability |
| CVE-2026-6230 | TA Tainacan tainacan | 7.5 | Jul 8 | Tainacan <= 1.0.3 - Unauthenticated SQL Injection via 'geoquery' REST API Parameter |
| CVE-2026-42740 | TA Tainacan tainacan | 9.3 | May 27 | WordPress Tainacan plugin <= 1.0.3 - SQL Injection vulnerability |
| CVE-2024-13236 | TA Tainacan Tainacan | 6.5 | Jan 23 | The Tainacan plugin for WordPress is vulnerable to SQL Injection via the 'collection_id' parameter in all versions up to, and including, 0.21.12 due to insufficient escaping on… |
| CVE-2024-48040 | TA Tainacan Tainacan | 6.5 | Oct 11 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tainacan Tainacan tainacan allows SQL Injection.This issue affects Tainacan:… |
| CVE-2024-9221 | TA Tainacan Tainacan | 6.1 | Oct 11 | The Tainacan plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to,… |
| CVE-2024-7135 | TA Tainacan Tainacan | 6.5 | Jul 31 | The Tainacan plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'get_file' function in all versions up to, and including,… |
| CVE-2024-30529 | TA Tainacan Tainacan | 9.8 | Jun 9 | Missing Authorization vulnerability in tainacan Tainacan tainacan.This issue affects Tainacan: from n/a through <= 0.20.7 |
| CVE-2024-34795 | TA Tainacan Tainacan | 5.4 | Jun 3 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tainacan Tainacan tainacan.This issue affects Tainacan: from n/a through <=… |
| CVE-2024-34794 | TA Tainacan Tainacan | 6.1 | Jun 3 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tainacan Tainacan tainacan.This issue affects Tainacan: from n/a through <=… |
| CVE-2024-1435 | TA Tainacan Tainacan | 7.5 | Feb 29 | Insertion of Sensitive Information Into Sent Data vulnerability in tainacan Tainacan tainacan.This issue affects Tainacan: from n/a through <= 0.20.6 |
| CVE-2023-47848 | TA Tainacan Tainacan | 6.1 | Nov 30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tainacan.Org Tainacan allows Reflected XSS.This issue affects Tainacan: from… |