WordPress Tainacan plugin <= 0.21.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary File Read vulnerability discovered by 1337Wannabe in WordPress Plugin Tainacan versions = 0.21.7...

PT-2024-38101 · WordPress · Tainacan

Name of the Vulnerable Software and Affected Versions: Tainacan plugin for WordPress versions up to, and including, 0.21.7 Description: The issue is related to a missing capability check on the get file function, which is also vulnerable to directory traversal. This allows authenticated attackers...

WordPress plugin Tainacan 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress Tainacan plugin <= 0.21.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Yudistira Arya Patchstack Alliance in WordPress Plugin Tainacan versions = 0.21.5...

WordPress Tainacan Plugin <= 0.21.5 is vulnerable to Cross Site Scripting (XSS)

Software Tainacan Type Plugin Vulnerable versions = 0.21.5 Fixed in 0.21.6 OWASP Top 10 A6: Vulnerable and Outdated Components Classification Cross Site Scripting XSS CVE CVE-2024-4367 Patch priority Low CVSS severity Low 6.5 Developer Tainacan Community PSID 7c17e185c06d Credits Yudistira Arya...

WordPress plugin Tainacan security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

WordPress Tainacan plugin <= 0.21.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Tainacan versions = 0.21.3...

WordPress Tainacan plugin <= 0.21.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Tainacan versions = 0.21.3...

WordPress Tainacan plugin <= 0.20.7 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin Tainacan versions = 0.20.7...

WordPress Tainacan Plugin <= 0.20.7 is vulnerable to Broken Access Control

Software Tainacan Type Plugin Vulnerable versions = 0.20.7 Fixed in 0.20.8 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-30529 Patch priority Low CVSS severity Low 5.3 Developer Tainacan Community PSID 9e1c0b3ec7ef Credits Dhabaleshwar Das Required...

CVE-2024-1435 WordPress Tainacan plugin <= 0.20.6 - Sensitive Data Exposure via Log File vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in tainacan Tainacan tainacan.This issue affects Tainacan: from n/a through = 0.20.6...

CVE-2024-1435 WordPress Tainacan plugin <= 0.20.6 - Sensitive Data Exposure via Log File vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in tainacan Tainacan tainacan.This issue affects Tainacan: from n/a through = 0.20.6...

WordPress Tainacan Plugin <= 0.20.6 is vulnerable to Sensitive Data Exposure

Software Tainacan Type Plugin Vulnerable versions = 0.20.6 Fixed in 0.20.7 OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2024-1435 Patch priority Low CVSS severity Low 5.3 Developer Tainacan Community PSID a8fb861193db Credits Peng Zhou Required privilege...

CVE-2023-47848 WordPress Tainacan Plugin <= 0.20.4 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tainacan.Org Tainacan allows Reflected XSS.This issue affects Tainacan: from n/a through 0.20.4...