Browse CVEs

MEDIUM 6.5 CVE-2024-13236 The Tainacan plugin for WordPress is vulnerable to SQL Injection via the 'collection_id' parameter in all versions up to, and including, 0.21.12 due … Tainacan 0.21.13+ Fix from $1,6002025-01-23 MEDIUM 6.5 CVE-2024-48040 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tainacan Tainacan tainacan allows SQL Injection… Tainacan 0.21.9+ Fix from $1,6002024-10-11 MEDIUM 6.1 CVE-2024-9221 The Tainacan plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the… Tainacan 0.21.11+ Fix from $1,6002024-10-11 MEDIUM 6.5 CVE-2024-7135 The Tainacan plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'get_file' function in all ve… Tainacan 0.21.8+ Fix from $1,6002024-07-31 CRITICAL 9.8 CVE-2024-30529 Missing Authorization vulnerability in tainacan Tainacan tainacan.This issue affects Tainacan: from n/a through <= 0.20.7. Tainacan 0.20.8+ Fix from $2,3002024-06-09 MEDIUM 5.4 CVE-2024-34795 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tainacan Tainacan tainacan.This issue affects T… Tainacan 0.21.4+ Fix from $1,6002024-06-03 MEDIUM 6.1 CVE-2024-34794 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tainacan Tainacan tainacan.This issue affects T… Tainacan 0.21.4+ Fix from $1,6002024-06-03 HIGH 7.5 CVE-2024-1435 Insertion of Sensitive Information Into Sent Data vulnerability in tainacan Tainacan tainacan.This issue affects Tainacan: from n/a through <= 0.20.6. Tainacan 0.20.7+ Fix from $1,9502024-02-29 MEDIUM 6.1 CVE-2023-47848 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tainacan.Org Tainacan allows Reflected XSS.This… Tainacan after 0.20.4 Fix from $1,6002023-11-30