CVE-2024-34795

Description

References

• patchstack.com/database/Wordpress/Plugin/tainacan/vulnerability/wordpress-tainacan-plugin-0-21-3-cross-site-scripting-xss-vulnerability-2
• patchstack.com/database/vulnerability/tainacan/wordpress-tainacan-plugin-0-21-3-cross-site-scripting-xss-vulnerability-2 · Third Party Advisory

More vulnerabilities in tainacan

• CVE-2024-13236MEDIUM 6.5The Tainacan plugin for WordPress is vulnerable to SQL Injection via the 'collection_id' parameter in all versions up to, and including, 0.2…
• CVE-2024-48040MEDIUM 6.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tainacan Tainacan tainacan allows SQL …
• CVE-2024-9221MEDIUM 6.1The Tainacan plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escapi…
• CVE-2024-7135MEDIUM 6.5The Tainacan plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'get_file' function …
• CVE-2024-30529CRITICAL 9.8Missing Authorization vulnerability in tainacan Tainacan tainacan.This issue affects Tainacan: from n/a through <= 0.20.7.