Tainacan
Tainacan Security Releases - October 2026
tainacan-2026-10 Oct 1, 2026 Source: Vendor
Tainacan security advisories for October 2026, compiled from CVE.org records.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.cve.org/CVERecord?id=CVE-2026-90989
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
2 lines
Showing 1–2 of 2
CVE-2026-90989
BR2026-0000-030231
Tainacan
unclaimed
The Tainacan WordPress plugin before 1.4.0 does not restrict its reports REST endpoints to users with a management capability, allowing any authenticated subscriber to read the email addresses of t...
Credited as Artus KG
CVE-2026-93767
BR2026-0000-033257
Tainacan
unclaimed
The Tainacan plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.0 via the 'guid' parameter parameter. This makes it possible for authenticated attac...
Credited as Wordfence PRISM