CVE-2023-25482

Description

References

• patchstack.com/database/vulnerability/wp-tiles/wordpress-wp-tiles-plugin-1-1-2-cross-site-request-forgery-csrf-vulnerability · Third Party Advisory

wp tiles 的其他漏洞

• CVE-2023-1426中危 6.5The WP Tiles WordPress plugin through 1.1.2 does not ensure that posts to be displayed are not draft/private, allowing any authenticated use…
• CVE-2022-4827中危 5.4The WP Tiles WordPress plugin through 1.1.2 does not validate and escape some of its shortcode attributes before outputting them back in a p…