Lucene search
+L

CVE-2023-1426

🗓️ 10 Apr 2023 13:17:55Reported by WPScanType 
cve
 cve
🔗 web.nvd.nist.gov👁 99 Views🌐 WEB

The WP Tiles WordPress plugin through 1.1.2 allows authenticated users to retrieve titles of draft and private posts

Related
Detection
Affected
Refs
Paths
ReporterTitlePublishedViews
Family
circl
Circl
CVE-2023-1426
10 Apr 202318:32
–circl
cnnvd
CNNVD
WordPress plugin WP Tile 信息泄露漏洞
10 Apr 202300:00
–cnnvd
cvelist
Cvelist
CVE-2023-1426 WP Tiles <= 1.1.2 - Subscriber+ Draft/Private Post Title Disclosure
10 Apr 202313:17
–cvelist
euvd
EUVD
EUVD-2023-23679
3 Oct 202520:07
–euvd
nvd
NVD
CVE-2023-1426
10 Apr 202314:15
–nvd
osv
OSV
CVE-2023-1426
10 Apr 202314:15
–osv
patchstack
Patchstack
WordPress WP Tiles Plugin <= 1.1.2 is vulnerable to Sensitive Data Exposure
11 Apr 202300:00
–patchstack
prion
Prion
Type confusion
10 Apr 202314:15
–prion
ptsecurity
Positive Technologies
PT-2023-16974 · WordPress · Wp Tiles
10 Apr 202300:00
–ptsecurity
rapid7
Rapid7 Vulnerability Database (full)
CVE-2023-1426: Undefined Security Weakness
10 Apr 202300:00
–rapid7
Rows per page
NVD
Vulners
Node
keetraxwp_tilesRange≤1.1.2wordpress
[
  {
    "vendor": "Unknown",
    "product": "WP Tiles",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThanOrEqual": "1.1.2"
      }
    ],
    "defaultStatus": "affected",
    "collectionURL": "https://wordpress.org/plugins"
  }
]
ParameterPositionPathDescriptionCWE
actionrequest body/wp-admin/admin-ajax.phpWP Tiles plugin lacks proper access control when rendering via admin-ajax parse-media-shortcode, allowing authenticated users to retrieve titles of draft/private posts (e.g., using shortcode [wp-tiles post_status='draft']).
shortcoderequest body/wp-admin/admin-ajax.phpWP Tiles plugin lacks proper access control when rendering via admin-ajax parse-media-shortcode, allowing authenticated users to retrieve titles of draft/private posts (e.g., using shortcode [wp-tiles post_status='draft']).

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 05:27Current
6.3Medium risk
Vulners AI Score6.3
CVSS 3.16.5
EPSS0.00795
SSVC
99