Skip to content
OpenAdvisories

Vendor

Tainacan.org

20 known vulnerabilities.

Products

Tainacan 18 Tainacan Interface 1 Tainá 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.1
    CVE-2026-95590

    WordPress Tainacan plugin <= 1.2.0 - SQL Injection vulnerability

    Subscriber SQL Injection in Tainacan <= 1.2.0 versions.

    Tainacan.org Tainacan
  • High 7.5
    CVE-2026-6230

    Tainacan <= 1.0.3 - Unauthenticated SQL Injection via 'geoquery' REST API Parameter

    The Tainacan plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'geoquery' parameter in all versions up to and including 1.0.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the exis…

    Tainacan.org Tainacan Web / CMS
  • High 8.6
    CVE-2025-47512

    WordPress Tainacan plugin <= 0.21.14 - Arbitrary File Deletion vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in tainacan Tainacan tainacan allows Path Traversal.This issue affects Tainacan: from n/a through <= 0.21.14.

    Tainacan.org Tainacan
  • High 8.5
    CVE-2024-48040

    WordPress Tainacan plugin <= 0.21.8 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tainacan Tainacan tainacan allows SQL Injection.This issue affects Tainacan: from n/a through <= 0.21.8.

    Tainacan.org Tainacan
  • High 7.1
    CVE-2024-34794

    WordPress Tainacan plugin <= 0.21.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tainacan Tainacan tainacan.This issue affects Tainacan: from n/a through <= 0.21.3.

    Tainacan.org Tainacan
  • High 7.1
    CVE-2023-47848

    WordPress Tainacan Plugin <= 0.20.4 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tainacan.Org Tainacan allows Reflected XSS.This issue affects Tainacan: from n/a through 0.20.4.

    Tainacan.org Tainacan