Advisories · Technology
Tainacan.
Every CVE that names Tainacan among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.9 Medium
Tainacan <= 1.3.0 - Authenticated (Editor+) Path Traversal to Arbitrary File Read via 'tmp_file' Parameter via Mass Assignment
- Tainacan
- Path traversal
- CVSS 6.5 Medium
Tainacan <= 1.3.0 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Read via 'guid' Parameter
- Tainacan
- Path traversal
- CVSS 4.3 Medium
Tainacan < 1.4.0 - Subscriber+ Repository Staff Email Address Disclosure via Reports REST Endpoints
- Tainacan
- Information disclosure
- CVSS 7.2 High
WordPress Tainacan plugin <= 1.3.0 - PHP Object Injection vulnerability
- Tainacan
- Insecure deserialization
- CVSS 7.1 High
WordPress Tainacan plugin <= 1.2.0 - SQL Injection vulnerability
- Tainacan
- SQL injection
- CVSS 7.5 High
Tainacan <= 1.0.3 - Unauthenticated SQL Injection via 'geoquery' REST API Parameter
- Tainacan
- SQL injection
- CVSS 9.3 CriticalCritical · CVSS 9+
WordPress Tainacan plugin <= 1.0.3 - SQL Injection vulnerability
- Tainacan
- SQL injection
- CVSS 5.3 Medium
Tainacan <= 1.0.1 - Missing Authorization to Unauthenticated Arbitrary Metadata Section Creation
- Tainacan
- Broken access control
- CVSS 5.3 Medium
Tainacan <= 1.0.0 - Unauthenticated Information Exposure
- Tainacan
- Information disclosure
- CVSS 6.1 Medium
Tainacan <= 1.0.0 - Reflected Cross-Site Scripting
- Tainacan
- Cross-site scripting (XSS)
- CVSS 8.6 High
WordPress Tainacan plugin <= 0.21.14 - Arbitrary File Deletion vulnerability
- Tainacan
- Path traversal
- CVSS 6.5 Medium
Tainacan <= 0.21.12 - Authenticated (Subscriber+) SQL Injection
- Tainacan
- SQL injection
- CVSS 8.5 High
WordPress Tainacan plugin <= 0.21.8 - SQL Injection vulnerability
- Tainacan
- SQL injection
- CVSS 6.1 Medium
Tainacan <= 0.21.10 - Reflected Cross-Site Scripting
- Tainacan
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
Tainacan <= 0.21.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read
- Tainacan
- Broken access control
- CVSS 5.3 Medium
WordPress Tainacan plugin <= 0.20.7 - Broken Access Control vulnerability
- Tainacan
- Broken access control
- CVSS 7.1 High
WordPress Tainacan plugin <= 0.21.3 - Cross Site Scripting (XSS) vulnerability
- Tainacan
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
WordPress Tainacan plugin <= 0.21.3 - Cross Site Scripting (XSS) vulnerability
- Tainacan
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
WordPress Tainacan plugin <= 0.20.6 - Sensitive Data Exposure via Log File vulnerability
- Tainacan
- Information disclosure
- CVSS 7.1 High
WordPress Tainacan Plugin <= 0.20.4 is vulnerable to Cross Site Scripting (XSS)
- Tainacan
- Cross-site scripting (XSS)