Oferwald Transposh Wordpress Translation vulnerabilities
3 known vulnerabilities affecting oferwald/transposh_wordpress_translation.
Total CVEs
3
CISA KEV
0
Public exploits
2
Exploited in wild
0
Severity breakdown
MEDIUM3
Vulnerabilities
Page 1 of 1
CVE-2022-2536MEDIUMCVSS 5.3≤ 1.0.9.62022-12-15
CVE-2022-2536 [MEDIUM] CWE-285 Transposh WordPress Translation <= 1.0.9.6 - Authorization Bypass
Transposh WordPress Translation <= 1.0.9.6 - Authorization Bypass
The Transposh WordPress Translation plugin for WordPress is vulnerable to unauthorized setting changes by unauthenticated users in versions up to, and including, 1.0.9.6. This is due to insufficient validation of settings on the 'tp_translation' AJAX action which makes it possible for unauthenticated attackers to bypass any restrictio
cvelistv5
CVE-2022-2462MEDIUMCVSS 5.3PoC≤ 1.0.9.62022-09-06
CVE-2022-2462 [MEDIUM] CWE-200 CVE-2022-2462: The Transposh WordPress Translation plugin for WordPress is vulnerable to sensitive information disc
The Transposh WordPress Translation plugin for WordPress is vulnerable to sensitive information disclosure to unauthenticated users in versions up to, and including, 1.0.9.6. This is due to insufficient permissions checking on the 'tp_history' AJAX action and insufficient restriction on the data returned in the response. This makes it possible for una
cvelistv5nvd
CVE-2022-2461MEDIUMCVSS 5.3PoC≤ 1.0.9.62022-09-06
CVE-2022-2461 [MEDIUM] CWE-862 CVE-2022-2461: The Transposh WordPress Translation plugin for WordPress is vulnerable to unauthorized setting chang
The Transposh WordPress Translation plugin for WordPress is vulnerable to unauthorized setting changes by unauthenticated users in versions up to, and including, 1.0.9.6. This is due to insufficient permissions checking on the 'tp_translation' AJAX action and default settings which makes it possible for unauthenticated attackers to influence the data
cvelistv5nvd