Lucene search
WPScanCVELIST:CVE-2023-1426HistoryApr 10, 2023 - 1:17 p.m.
CVE-2023-1426 WP Tiles <= 1.1.2 - Subscriber+ Draft/Private Post Title Disclosure
2023-04-1013:17:55
WPScan
www.cve.org
1
wp tiles
authentication
post titles
0.001 Low
EPSS
Percentile
29.8%
The WP Tiles WordPress plugin through 1.1.2 does not ensure that posts to be displayed are not draft/private, allowing any authenticated users, such as subscriber to retrieve the titles of draft and privates posts for example. AN attacker could also retrieve the title of any other type of post.
CNA Affected
[
{
"vendor": "Unknown",
"product": "WP Tiles",
"versions": [
{
"status": "affected",
"versionType": "custom",
"version": "0",
"lessThanOrEqual": "1.1.2"
}
],
"defaultStatus": "affected",
"collectionURL": "https://wordpress.org/plugins"
}
]Related
prion
prion
Type confusion
2023-04-10 14:15:00
cve
cve
CVE-2023-1426
2023-04-10 14:15:09
wpexploit
wpexploit
WP Tiles <= 1.1.2 - Subscriber+ Draft/Private Post Title Disclosure
2023-03-16 00:00:00
nvd
nvd
CVE-2023-1426
2023-04-10 14:15:09
wpvulndb
wpvulndb
WP Tiles <= 1.1.2 - Subscriber+ Draft/Private Post Title Disclosure
2023-03-16 00:00:00