Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Tainacan — Vulnerabilities & Security Advisories 17

All 17 CVE vulnerabilities found in Tainacan, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities specifically affecting Tainacan, a content management system. The database collects historical security flaws, including information disclosure issues, cross-site scripting errors, and unauthorized file inclusion defects. The covered time range spans from the software's initial public releases through the most recently patched versions. Readers can use this page to track the vendor's security advisories, understand the recurring weakness classes that impact this product, and review its complete vulnerability history. This aggregation supports security teams and developers who need to assess exposure without parsing individual release notes.

Vendor: Tainacan.org

CVE ID Title CVSS Severity Published
CVE-2026-94676 WordPress Tainacan plugin <= 1.3.0 - PHP Object Injection vulnerability CWE-502 7.2 High 2026-10-10
CVE-2026-95590 WordPress Tainacan plugin <= 1.2.0 - SQL Injection vulnerability CWE-89 7.1 High 2026-09-23
CVE-2026-6230 Tainacan <= 1.0.3 - Unauthenticated SQL Injection via 'geoquery' REST API Parameter CWE-89 7.5 High 2026-07-08
CVE-2026-42740 WordPress Tainacan plugin <= 1.0.3 - SQL Injection vulnerability CWE-89 9.3 Critical 2026-05-27
CVE-2025-14043 Tainacan <= 1.0.1 - Missing Authorization to Unauthenticated Arbitrary Metadata Section Creation CWE-862 5.3 Medium 2025-12-21
CVE-2025-12747 Tainacan <= 1.0.0 - Unauthenticated Information Exposure CWE-552 5.3 Medium 2025-11-21
CVE-2025-12746 Tainacan <= 1.0.0 - Reflected Cross-Site Scripting CWE-79 6.1 Medium 2025-11-21
CVE-2025-47512 WordPress Tainacan plugin <= 0.21.14 - Arbitrary File Deletion vulnerability CWE-22 8.6 High 2025-05-23
CVE-2024-13236 Tainacan <= 0.21.12 - Authenticated (Subscriber+) SQL Injection CWE-89 6.5 Medium 2025-01-23
CVE-2024-48040 WordPress Tainacan plugin <= 0.21.8 - SQL Injection vulnerability CWE-89 8.5 High 2024-10-11
CVE-2024-9221 Tainacan <= 0.21.10 - Reflected Cross-Site Scripting CWE-79 6.1 Medium 2024-10-11
CVE-2024-7135 Tainacan <= 0.21.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read CWE-862 6.5 Medium 2024-07-31
CVE-2024-30529 WordPress Tainacan plugin <= 0.20.7 - Broken Access Control vulnerability CWE-862 5.3 Medium 2024-06-09
CVE-2024-34794 WordPress Tainacan plugin <= 0.21.3 - Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2024-06-03
CVE-2024-34795 WordPress Tainacan plugin <= 0.21.3 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2024-06-03
CVE-2024-1435 WordPress Tainacan plugin <= 0.20.6 - Sensitive Data Exposure via Log File vulnerability CWE-201 5.3 Medium 2024-02-29
CVE-2023-47848 WordPress Tainacan Plugin <= 0.20.4 is vulnerable to Cross Site Scripting (XSS) CWE-79 7.1 High 2023-11-30

All 17 known CVE vulnerabilities affecting Tainacan with full Chinese analysis, references, and POCs where available.