Security
فارسی
All products

tainacan

WordPress · Plugin
22 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Tainacan <= 1.3.0 - Authenticated (Editor+) Path Traversal to Arbitrary File Read via 'tmp_file' Parameter via Mass AssignmentCVE-2026-104743 tainacan WordPress Medium Fix reported
Tainacan <= 1.3.0 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Read via 'guid' ParameterCVE-2026-93767 tainacan WordPress Medium Fix reported
Tainacan < 1.4.0 - Authenticated (Subscriber+) Information ExposureCVE-2026-90989 tainacan WordPress Medium Fix reported
Tainacan <= 1.3.0 - Authenticated (Custom Role+) PHP Object InjectionCVE-2026-94676 tainacan WordPress High Fix reported
Tainacan <= 1.2.0 - Authenticated (Subscriber+) SQL InjectionCVE-2026-95590 tainacan WordPress Medium Fix reported
PDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDFCVE-2024-4367 · GHSA-WGRM-67XF-HHPQ pdfjs-distRed Hat Enterprise Linux 6/firefox npmRed HatWordPress High Fix reported
Tainacan <= 1.0.3 - Unauthenticated SQL Injection via 'geoquery' REST API ParameterCVE-2026-6230 tainacan WordPress High Fix reported
Tainacan <= 1.0.3 - Unauthenticated SQL InjectionCVE-2026-42740 tainacan WordPress High Fix reported
Tainacan <= 1.0.1 - Missing Authorization to Unauthenticated Arbitrary Metadata Section CreationCVE-2025-14043 tainacan WordPress Medium Fix reported
Tainacan <= 1.0.0 - Unauthenticated Information ExposureCVE-2025-12747 tainacan WordPress Medium Fix reported
Tainacan <= 1.0.0 - Reflected Cross-Site ScriptingCVE-2025-12746 tainacan WordPress Medium Fix reported
Tainacan <= 0.21.14 - Unauthenticated Arbitrary File DeletionCVE-2025-47512 tainacan WordPress Medium Fix reported
Tainacan <= 0.21.12 - Authenticated (Subscriber+) SQL InjectionCVE-2024-13236 tainacan WordPress Medium Fix reported
Tainacan <= 0.21.8 - Authenticated (Subscriber+) SQL InjectionCVE-2024-48040 tainacan WordPress Medium Fix reported
Tainacan <= 0.21.10 - Reflected Cross-Site ScriptingCVE-2024-9221 tainacan WordPress Medium Fix reported
Tainacan <= 0.21.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File ReadCVE-2024-7135 tainacan WordPress Medium Fix reported
Tainacan <= 0.21.3 - Unauthenticated Stored Cross-Site ScriptingCVE-2024-34794 tainacan WordPress High Fix reported
Tainacan <= 0.21.3 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-34795 tainacan WordPress Medium Fix reported
Tainacan <= 0.20.7 - Missing AuthorizationCVE-2024-30529 tainacan WordPress Medium Fix reported
Tainacan <= 0.20.6 - Unauthenticated Sensitive Information ExposureCVE-2024-1435 tainacan WordPress Medium Fix reported