Read the docs

tainacan

Records20All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9

Exploited now

tainacan records in CISA KEV

No tainacan vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Tainacan 9 records MEDIUM

Records

9 records in Tainacan · all components

TI-2024-32242 CVE-2024-48040 · GHSA-9832-82h6-vrv6

WordPress Tainacan plugin <= 0.21.8 - SQL Injection vulnerability

Priority LOW 38

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tainacan Tainacan tainacan allows SQL Injection.This issue affects Tainacan: from n/a through <= 0.21.8.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00537 Published 2024-10-11 No fix listed CWE-89
TI-2023-25956 CVE-2023-47848 · GHSA-g2rp-5pwj-jww4

WordPress Tainacan Plugin <= 0.20.4 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tainacan.Org Tainacan allows Reflected XSS.This issue affects Tainacan: from n/a through 0.20.4.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00412 Published 2023-11-30 No fix listed CWE-79
TI-2024-08557 CVE-2024-9221 · GHSA-5gh7-7795-6ghv

Tainacan <= 0.21.10 - Reflected Cross-Site Scripting

Priority LOW 30

The Tainacan plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 0.21.10.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00434 Published 2024-10-11 No fix listed CWE-79
TI-2024-12280 CVE-2024-13236 · GHSA-842h-xgm6-hwm5

Tainacan <= 0.21.12 - Authenticated (Subscriber+) SQL Injection

Priority LOW 29

The Tainacan plugin for WordPress is vulnerable to SQL Injection via the 'collection_id' parameter in all versions up to, and including, 0.21.12 due to insufficient escaping on the user supplied parameter and lack of suf…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00466 Published 2025-01-23 No fix listed CWE-89
TI-2024-23082 CVE-2024-34795 · GHSA-fvmr-3pjr-w785

WordPress Tainacan plugin <= 0.21.3 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tainacan Tainacan tainacan.This issue affects Tainacan: from n/a through <= 0.21.3.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00263 Published 2024-06-03 No fix listed CWE-79
Open these records in search →