CVE-2023-1426

CVE-2023-1426 affects the WordPress plugin WP Tiles up to version 1.1.2. The vulnerability arises because the plugin’s display logic does not ensure that posts shown are not drafts or private, allowing any authenticated user (e.g., subscribers) to retrieve the titles of draft/private posts and po...

CVE-2022-4827

Summary: CVE-2022-4827 affects the WP Tiles WordPress plugin up to version 1.1.2. The vulnerability stems from insufficient validation/escaping of shortcode attributes, allowing stored XSS when a user with contributor+ privileges renders a page/post containing the shortcode. Impact is stored XSS ...

CVE-2023-25482

CVE-2023-25482 is a CSRF vulnerability in the WordPress plugin WP Tiles (Mike Martel) affecting versions