PT-2026-43652 · WordPress · Tainacan

Hhhai · Published 2026-05-27 · Updated 2026-05-27 · CVE-2026-42740

Positive Technologies (AI Summary)

CVSS v3.1

9.3

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

Name of the Vulnerable Software and Affected Versions Tainacan versions prior to 1.0.4

Description Tainacan is subject to Blind SQL Injection, which occurs when an application fails to properly neutralize special elements used in an SQL command, allowing an attacker to infer data by observing the application's response to specific queries.

Recommendations Update to a version later than 1.0.3.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2026-42740

Affected Products

Tainacan

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-42740 · Security Note
• https://twitter.com/VulmonFeeds/status/2059736547017068811 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/tainacan/vulnerability/wordpress-tainacan-plugin-1-0-3-sql-injection-vulnerability?_s_id=cve · Note