CVE-2022-25811: The Transposh WordPress Translation WordPress plugin through 1.0.8 does not sanitise and escape the order and orderby parameters before using them in a SQL…

PriorityP338high7.2CVSS 3.1

AVNACLPRHUINSUCHIHAH

EPSS

1.20%

64.4th percentile

The Transposh WordPress Translation WordPress plugin through 1.0.8 does not sanitise and escape the order and orderby parameters before using them in a SQL statement, leading to a SQL injection

Affected

1 ranges

Vendor	Product	Version range	Fixed in
transposh	transposh_wordpress_translation	<= 1.0.8	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.