WP Tiles <= 1.1.2 - Cross-Site Request Forgery

2023-05-2400:00:00

wpscan.com

wp tiles

cross-site request forgery

vulnerability

0.001 Low

EPSS

Percentile

23.6%

The plugin does not properly validate and verify requests use nonces, leading to a Cross-Site Request Forgery (CSRF) vulnerability.

CPENameOperatorVersion
wp-tileseq*

CPE	Name	Operator	Version
	wp-tiles	eq	*

References

patchstack.com/database/vulnerability/wp-tiles/wordpress-wp-tiles-plugin-1-1-2-cross-site-request-forgery-csrf-vulnerability

0.001 Low

EPSS

Percentile

23.6%

Related for WPVDB-ID:D2CAF573-3EA0-4078-B767-939A66CFB5A9