plugin

Tilda Publishing Vulnerabilities

1 known security issue reported for the Tilda Publishing WordPress plugin. Most recent disclosed Sep 4, 2023.

1 medium

Running Tilda Publishing on your site? Check whether your installed version is affected.

Tilda Publishing <= 0.3.23 - Missing Authorization

medium

The Tilda Publishing plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to missing capability checks on several functions hooked via AJAX actions such as 'ajax_export_file,' 'ajax_sync,' 'ajax_get_keys,' 'ajax_switcher_status,' and more in versions up to, and including, 0.3.23...

CVSS:: 5.4
Affected:: up to 0.3.23
Fixed in:: 0.3.24
Disclosed:: Sep 4, 2023

CVE-2023-31234 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database