Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tainacan Tainacan tainacan allows Blind SQL Injection.This…

A blind SQL injection vulnerability has been identified in the Tainacan WordPress plugin. The vulnerability is classified as CVE-2026-42740 and affects versions up to and including 1.0.3. The issue stems from improper neutralization of special elements used in SQL commands, allowing attackers to perform blind SQL injection attacks. This vulnerability could potentially allow unauthorized access to database information. The vulnerability has been documented by both NVD and Patchstack security databases.