Vulnerabilities > Keetrax
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-07-18 | CVE-2023-25482 | Cross-Site Request Forgery (CSRF) vulnerability in Keetrax WP Tiles Cross-Site Request Forgery (CSRF) vulnerability in Mike Martel WP Tiles plugin <= 1.1.2 versions. | 8.8 |
| 2023-04-10 | CVE-2022-4827 | Unspecified vulnerability in Keetrax WP Tiles 1.1.2 The WP Tiles WordPress plugin through 1.1.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks | 5.4 |
| 2023-04-10 | CVE-2023-1426 | Unspecified vulnerability in Keetrax WP Tiles 1.1.2 The WP Tiles WordPress plugin through 1.1.2 does not ensure that posts to be displayed are not draft/private, allowing any authenticated users, such as subscriber to retrieve the titles of draft and privates posts for example. | 6.5 |