Plugin icon

Tainacan

tainacan

Vulnerabilities:

19

Last Updated:

October 7, 2026

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2026-10-15
Title
Tainacan < 1.4.0 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Read via 'guid' Parameter
Fixed in
Fixed in 1.4.0
CVSS
6.5 (medium)
Published
2026-10-12
Title
Tainacan < 1.4.0 - Subscriber+ Repository Staff Email Address Disclosure via Reports REST Endpoints
Fixed in
Fixed in 1.4.0
CVSS
4.3 (medium)
Published
2026-10-08
Title
Tainacan < 1.4.0 - Authenticated (Custom Role+) PHP Object Injection
Fixed in
Fixed in 1.4.0
CVSS
7.5 (high)
Published
2026-09-23
Title
Tainacan < 1.3.0 - Authenticated (Subscriber+) SQL Injection
Fixed in
Fixed in 1.3.0
CVSS
6.5 (medium)
Published
2026-07-07
Title
Tainacan < 1.1.0 - Unauthenticated SQL Injection via 'geoquery' REST API Parameter
Fixed in
Fixed in 1.1.0
CVSS
7.5 (high)
Published
2026-05-28
Title
Tainacan < 1.1.0 - Unauthenticated SQL Injection
Fixed in
Fixed in 1.1.0
CVSS
7.5 (high)
Published
2025-12-20
Title
Tainacan < 1.0.2 - Missing Authorization to Unauthenticated Arbitrary Metadata Section Creation
Fixed in
Fixed in 1.0.2
CVSS
5.3 (medium)
Published
2025-11-20
Title
Tainacan < 1.0.1 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.0.1
CVSS
6.1 (medium)
Published
2025-11-20
Title
Tainacan < 1.0.1 - Unauthenticated Information Exposure
Fixed in
Fixed in 1.0.1
CVSS
5.3 (medium)
Published
2025-05-16
Title
Tainacan < 0.21.15 - Unauthenticated Arbitrary File Deletion
Fixed in
Fixed in 0.21.15
CVSS
5.3 (medium)
Published
2025-01-22
Title
Tainacan < 0.21.13 - Authenticated (Subscriber+) SQL Injection
Fixed in
Fixed in 0.21.13
CVSS
6.5 (medium)
Published
2024-10-10
Title
Tainacan < 0.21.11 - Reflected Cross-Site Scripting
Fixed in
Fixed in 0.21.11
CVSS
6.1 (medium)
Published
2024-10-09
Title
Tainacan < 0.21.9 - Authenticated (Subscriber+) SQL Injection
Fixed in
Fixed in 0.21.9
CVSS
6.5 (medium)
Published
2024-07-30
Title
Tainacan < 0.21.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read
Fixed in
Fixed in 0.21.8
CVSS
6.5 (medium)
Published
2024-05-20
Title
Tainacan < 0.21.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 0.21.4
CVSS
6.4 (medium)
Published
2024-05-20
Title
Tainacan < 0.21.4 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 0.21.4
CVSS
7.2 (high)
Published
2024-03-29
Title
Tainacan < 0.20.8 - Missing Authorization
Fixed in
Fixed in 0.20.8
CVSS
5.3 (medium)
Published
2024-02-26
Title
Tainacan < 0.20.7 - Unauthenticated Sensitive Information Exposure
Fixed in
Fixed in 0.20.7
CVSS
5.3 (medium)
Published
2023-11-20
Title
Tainacan < 0.20.5 - Reflected Cross-Site Scripting
Fixed in
Fixed in 0.20.5
CVSS
6.1 (medium)