CVE-2023-25482

概要

参考情報

• patchstack.com/database/vulnerability/wp-tiles/wordpress-wp-tiles-plugin-1-1-2-cross-site-request-forgery-csrf-vulnerability · Third Party Advisory

wp tiles のその他の脆弱性

• CVE-2023-1426中 6.5The WP Tiles WordPress plugin through 1.1.2 does not ensure that posts to be displayed are not draft/private, allowing any authenticated use…
• CVE-2022-4827中 5.4The WP Tiles WordPress plugin through 1.1.2 does not validate and escape some of its shortcode attributes before outputting them back in a p…