Unrated severityNVD Advisory· Published Oct 14, 2026

CVE-2026-90989

Description

The Tainacan WordPress plugin before 1.4.0 does not restrict its reports REST endpoints to users with a management capability, allowing any authenticated subscriber to read the email addresses of the repository's staff.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Tainacanllm-fuzzy
Range: <1.4.0
Package: https://wordpress.org/plugins/tainacan

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/0b78000b-99ee-4cee-a7e9-369fc8c98093/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000