Log in Start free

tainacan

Products

ProductCVEsExploitedLatest
Tainacan17–Oct 28, 2026
Tainá1–Apr 15, 2025
Tainacan Interface1–Apr 16, 2024

Exploited and recent CVEs

  • CVE-2026-104743 Medium 4.9 Tainacan <= 1.3.0 - Authenticated (Editor+) Path Traversal to Arbitrary File Read via 'tmp_file' Parameter via Mass Assignment 0.8%
  • CVE-2026-93767 Medium 6.5 Tainacan <= 1.3.0 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Read via 'guid' Parameter 0.6%
  • CVE-2026-95590 High 7.1 WordPress Tainacan plugin <= 1.2.0 - SQL Injection vulnerability 0.3%
  • CVE-2026-6230 High 7.5 Tainacan <= 1.0.3 - Unauthenticated SQL Injection via 'geoquery' REST API Parameter 0.5%
  • CVE-2026-42740 Critical 9.3 WordPress Tainacan plugin <= 1.0.3 - SQL Injection vulnerability 0.2%
  • CVE-2025-14043 Medium 5.3 Tainacan <= 1.0.1 - Missing Authorization to Unauthenticated Arbitrary Metadata Section Creation 0.3%
  • CVE-2025-12747 Medium 5.3 Tainacan <= 1.0.0 - Unauthenticated Information Exposure 0.3%
  • CVE-2025-12746 Medium 6.1 Tainacan <= 1.0.0 - Reflected Cross-Site Scripting 0.3%
  • CVE-2025-47512 High 8.6 WordPress Tainacan plugin <= 0.21.14 - Arbitrary File Deletion vulnerability 0.5%
  • CVE-2025-26919 Medium 6.5 WordPress Tainá plugin <= 0.2.2 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-13236 Medium 6.5 Tainacan <= 0.21.12 - Authenticated (Subscriber+) SQL Injection 0.5%
  • CVE-2024-48040 High 8.5 WordPress Tainacan plugin <= 0.21.8 - SQL Injection vulnerability 0.5%
  • CVE-2024-9221 Medium 6.1 Tainacan <= 0.21.10 - Reflected Cross-Site Scripting 0.4%
  • CVE-2024-7135 Medium 6.5 Tainacan <= 0.21.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read 2.7%
  • CVE-2024-30529 Medium 5.3 WordPress Tainacan plugin <= 0.20.7 - Broken Access Control vulnerability 0.4%
  • CVE-2024-34794 High 7.1 WordPress Tainacan plugin <= 0.21.3 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-34795 Medium 6.5 WordPress Tainacan plugin <= 0.21.3 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-3867 Medium 6.1 Tainacan Interface <= 2.7.2 - Reflected Cross-Site Scripting 0.8%
  • CVE-2024-1435 Medium 5.3 WordPress Tainacan plugin <= 0.20.6 - Sensitive Data Exposure via Log File vulnerability 0.5%