<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: tainacan</title><description>Every new CVE for tainacan.</description><link>https://agentprime.io/</link><item><title>CVE-2026-104743: Tainacan &lt;= 1.3.0 - Authenticated (Editor+) Path Traversal to Arbitrary File Read via &apos;tmp_file&apos; Parameter via Mass Assignment</title><link>https://agentprime.io/advisories/CVE-2026-104743/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-104743/</guid><description>CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 28 Oct 2026 06:45:21 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-93767: Tainacan &lt;= 1.3.0 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Read via &apos;guid&apos; Parameter</title><link>https://agentprime.io/advisories/CVE-2026-93767/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-93767/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 16 Oct 2026 05:30:22 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-90989: Tainacan &lt; 1.4.0 - Subscriber+ Repository Staff Email Address Disclosure via Reports REST Endpoints</title><link>https://agentprime.io/advisories/CVE-2026-90989/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-90989/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 14 Oct 2026 06:00:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-94676: WordPress Tainacan plugin &lt;= 1.3.0 - PHP Object Injection vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-94676/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-94676/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 10 Oct 2026 14:00:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-95590: WordPress Tainacan plugin &lt;= 1.2.0 - SQL Injection vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-95590/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-95590/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 23 Sep 2026 18:14:45 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-6230: Tainacan &lt;= 1.0.3 - Unauthenticated SQL Injection via &apos;geoquery&apos; REST API Parameter</title><link>https://agentprime.io/advisories/CVE-2026-6230/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-6230/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 08 Jul 2026 11:30:32 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-42740: WordPress Tainacan plugin &lt;= 1.0.3 - SQL Injection vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-42740/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-42740/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 27 May 2026 09:49:05 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-14043: Tainacan &lt;= 1.0.1 - Missing Authorization to Unauthenticated Arbitrary Metadata Section Creation</title><link>https://agentprime.io/advisories/CVE-2025-14043/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-14043/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 21 Dec 2025 02:20:32 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-12747: Tainacan &lt;= 1.0.0 - Unauthenticated Information Exposure</title><link>https://agentprime.io/advisories/CVE-2025-12747/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-12747/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 21 Nov 2025 16:28:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-12746: Tainacan &lt;= 1.0.0 - Reflected Cross-Site Scripting</title><link>https://agentprime.io/advisories/CVE-2025-12746/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-12746/</guid><description>CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 21 Nov 2025 07:31:45 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-47512: WordPress Tainacan plugin &lt;= 0.21.14 - Arbitrary File Deletion vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-47512/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-47512/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 23 May 2025 12:43:34 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-13236: Tainacan &lt;= 0.21.12 - Authenticated (Subscriber+) SQL Injection</title><link>https://agentprime.io/advisories/CVE-2024-13236/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-13236/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 23 Jan 2025 11:13:28 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-48040: WordPress Tainacan plugin &lt;= 0.21.8 - SQL Injection vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-48040/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-48040/</guid><description>CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 11 Oct 2024 18:25:55 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-9221: Tainacan &lt;= 0.21.10 - Reflected Cross-Site Scripting</title><link>https://agentprime.io/advisories/CVE-2024-9221/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-9221/</guid><description>CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 11 Oct 2024 06:50:17 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-7135: Tainacan &lt;= 0.21.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read</title><link>https://agentprime.io/advisories/CVE-2024-7135/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-7135/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 31 Jul 2024 10:59:18 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-30529: WordPress Tainacan plugin &lt;= 0.20.7 - Broken Access Control vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-30529/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-30529/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 09 Jun 2024 11:03:23 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-34794: WordPress Tainacan plugin &lt;= 0.21.3 - Cross Site Scripting (XSS) vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-34794/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-34794/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 03 Jun 2024 10:50:40 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-34795: WordPress Tainacan plugin &lt;= 0.21.3 - Cross Site Scripting (XSS) vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-34795/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-34795/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 03 Jun 2024 10:44:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-1435: WordPress Tainacan plugin &lt;= 0.20.6 - Sensitive Data Exposure via Log File vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-1435/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-1435/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Feb 2024 05:03:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-47848: WordPress Tainacan Plugin &lt;= 0.20.4 is vulnerable to Cross Site Scripting (XSS)</title><link>https://agentprime.io/advisories/CVE-2023-47848/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-47848/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 30 Nov 2023 16:51:46 GMT</pubDate><category>CVE</category></item></channel></rss>