tainacan vulnerabilities

CVEs per yearBy the year they were published

1. 20248
2. 20256
3. 20265

Newest CVEs

• CVE-2026-104743

  Tainacan <= 1.3.0 - Authenticated (Editor+) Path Traversal to Arbitrary File Read via 'tmp_file' Parameter via Mass Assignment

  tainacan · Tainacan

  Medium4.9
• CVE-2026-93767

  Tainacan <= 1.3.0 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Read via 'guid' Parameter

  tainacan · Tainacan

  Medium6.5
• CVE-2026-95590

  WordPress Tainacan plugin <= 1.2.0 - SQL Injection vulnerability

  tainacan · Tainacan

  High7.1
• CVE-2026-6230

  Tainacan <= 1.0.3 - Unauthenticated SQL Injection via 'geoquery' REST API Parameter

  tainacan · Tainacan

  High7.5
• CVE-2026-42740

  WordPress Tainacan plugin <= 1.0.3 - SQL Injection vulnerability

  tainacan · Tainacan

  Critical9.3
• CVE-2025-14043

  Tainacan <= 1.0.1 - Missing Authorization to Unauthenticated Arbitrary Metadata Section Creation

  tainacan · Tainacan

  Medium5.3
• CVE-2025-12747

  Tainacan <= 1.0.0 - Unauthenticated Information Exposure

  tainacan · Tainacan

  Medium5.3
• CVE-2025-12746

  Tainacan <= 1.0.0 - Reflected Cross-Site Scripting

  tainacan · Tainacan

  Medium6.1
• CVE-2025-47512

  WordPress Tainacan plugin <= 0.21.14 - Arbitrary File Deletion vulnerability

  tainacan · Tainacan

  High8.6
• CVE-2025-26919

  WordPress Tainá plugin <= 0.2.2 - Cross Site Scripting (XSS) vulnerability

  tainacan · Tainá

  Medium6.5