Skip to content
Threat Feed
Subscribe

Vendor

Tainacan

1 brief RSS
high advisory

CVE-2026-6230: Tainacan WordPress Plugin SQL Injection Vulnerability

An unauthenticated attacker can exploit CVE-2026-6230, a time-based blind SQL Injection vulnerability in the Tainacan plugin for WordPress (versions up to and including 1.0.3) via the 'geoquery' parameter, to append arbitrary SQL queries and exfiltrate sensitive information from the database due to insufficient input validation.

Tainacan plugin wordpress sql-injection webserver vulnerability cve
1r 1t 1c