Skip to content
OpenAdvisories

Vendor

Tainacan.org

20 known vulnerabilities.

Products

Tainacan 18 Tainacan Interface 1 Tainá 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2024-7135 Public exploit

    Tainacan <= 0.21.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read

    The Tainacan plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'get_file' function in all versions up to, and including, 0.21.7. The function is also vulnerable to directory traversal. This makes it pos…

    Tainacan.org Tainacan Web / CMS
  • Medium 6.1
    CVE-2024-3867 Public exploit

    Tainacan Interface <= 2.7.2 - Reflected Cross-Site Scripting

    The archive-tainacan-collection theme for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in version 2.7.2. This makes it possible for unauthenticated attackers to inject arbitr…

    Tainacan.org Tainacan Interface Web / CMS