Vulnerabilities / Tainacan
Tainacan vulnerabilities
Advisories WPSec published for Tainacan. Other sources may list more. Its attack surface: Tainacan on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-08 | WPSEC-2026-0675 | Tainacan <= 1.3.0 - Authenticated (Editor+) PHP Object Injection via Metadata Order and Type Options | High 7.2 | 1.4.0 |
| 2026-10-08 | WPSEC-2026-0674 | Tainacan <= 1.3.0 - Authenticated (Editor+) Arbitrary File Read via Importer Source File | Medium 4.9 | 1.4.0 |
| 2026-10-08 | WPSEC-2026-0673 | Tainacan <= 1.3.0 - Authenticated (Subscriber+) Sensitive Information Exposure via Reports REST Endpoints | Medium 4.3 | 1.4.0 |
License: CC BY 4.0