Known vulnerabilities in the Tainacan plugin
15 security advisories have been published for the Tainacan plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Tainacan - SQL Injection (CVE-2026-6230) HIGH
- Tainacan - SQL Injection (CVE-2026-42740) CRITICAL
- Tainacan - Broken Access Control (CVE-2025-14043) MEDIUM
- Tainacan - Information Disclosure (CVE-2025-12747) MEDIUM
- Tainacan - Cross-Site Scripting (XSS) (CVE-2025-12746) MEDIUM
- Tainacan - Path Traversal (CVE-2025-47512) HIGH
- Tainacan - SQL Injection (CVE-2024-13236) MEDIUM
- Tainacan - SQL Injection (CVE-2024-48040) HIGH
- Tainacan - Cross-Site Scripting (XSS) (CVE-2024-9221) MEDIUM
- Tainacan - Path Traversal (CVE-2024-7135) MEDIUM
- Tainacan - Broken Access Control (CVE-2024-30529) MEDIUM
- Tainacan - Cross-Site Scripting (XSS) (CVE-2024-34795) MEDIUM
- Tainacan - Cross-Site Scripting (XSS) (CVE-2024-34794) HIGH
- Tainacan - Information Disclosure (CVE-2024-1435) MEDIUM
- Tainacan - Cross-Site Scripting (XSS) (CVE-2023-47848) HIGH