TI-2026-70494 CVE-2026-94676 · GHSA-g3x7-hv56-2x6hPHP object injection in WordPress Tainacan pluginPriority LOW 33Deserialization of Untrusted Data vulnerability in Tainacan Community Tainacan tainacan allows Object Injection.This issue affects Tainacan: from n/a through 1.3.0.CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00291 · Published 2026-10-10 · No fix listed CWE-502