Tainacan vulnerabilities
We track 4 vulnerabilities in Tainacan products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on July 8, 2026.
Latest Tainacan vulnerabilities
- 7.5 High severity
Tainacan: Improper Neutralization of Special Elements used in an SQL Command
The Tainacan plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'geoquery' parameter in all versions up to and including 1.0.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the exist
- 9.3 Critical severity
Tainacan: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tainacan Tainacan tainacan allows Blind SQL Injection.This issue affects Tainacan: from n/a through <= 1.0.3.
- 8.6 High severity
Tainacan: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in tainacan Tainacan tainacan allows Path Traversal.This issue affects Tainacan: from n/a through <= 0.21.14.
- 7.5 High severity
Tainacan: Insertion of Sensitive Information Into Sent Data
Insertion of Sensitive Information Into Sent Data vulnerability in tainacan Tainacan tainacan.This issue affects Tainacan: from n/a through <= 0.20.6.