Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Keetrax Component: Wp Tiles Clear all filters
TI-2022-04423 CVE-2022-4827 · GHSA-f36c-v864-mx8h

WP Tiles <= 1.1.2 - Contributor+ Stored XSS

Priority MEDIUM 58

The WP Tiles WordPress plugin through 1.1.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contribu…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00471 Published 2023-04-10 No fix listed
TI-2023-01347 CVE-2023-1426 · GHSA-67rc-9g3p-jjqp

WP Tiles <= 1.1.2 - Subscriber+ Draft/Private Post Title Disclosure

Priority MEDIUM 62

The WP Tiles WordPress plugin through 1.1.2 does not ensure that posts to be displayed are not draft/private, allowing any authenticated users, such as subscriber to retrieve the titles of draft and privates posts for ex…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00795 Published 2023-04-10 No fix listed