Transposh

9 CVEs across 1 Transposh products. Browse Transposh vulnerabilities, severities, and proof-of-concept exploits.

Transposh products with known CVEs

ProductCVEs
Transposh WordPress Translation9
Transposh CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2022-2536Medium5.32022-12-15The Transposh WordPress Translation plugin for WordPress is vulnerable to unauthorized setting changes by unauthenticated users in versions up to, and includin…
CVE-2022-2462Medium5.32022-09-06The Transposh WordPress Translation plugin for WordPress is vulnerable to sensitive information disclosure to unauthenticated users in versions up to, and incl…
CVE-2022-2461Medium5.32022-09-06The Transposh WordPress Translation plugin for WordPress is vulnerable to unauthorized setting changes by unauthenticated users in versions up to, and includin…
CVE-2022-25812High7.22022-08-22The Transposh WordPress Translation WordPress plugin before 1.0.8 does not validate its debug settings, which could allow allowing high privilege users such as…
CVE-2022-25811High7.22022-08-22The Transposh WordPress Translation WordPress plugin through 1.0.8 does not sanitise and escape the order and orderby parameters before using them in a SQL sta…
CVE-2022-25810Medium6.52022-08-22The Transposh WordPress Translation WordPress plugin through 1.0.8 exposes a couple of sensitive actions such has “tp_reset” under the Utilities tab (/wp-admin…
CVE-2021-24912Medium5.42022-08-22The Transposh WordPress Translation WordPress plugin before 1.0.8 does not have CSRF check in its tp_translation AJAX action, which could allow attackers to ma…
CVE-2021-24911Medium5.42022-08-22The Transposh WordPress Translation WordPress plugin before 1.0.8 does not sanitise and escape the tk0 parameter from the tp_translation AJAX action, leading t…
CVE-2021-24910Medium6.12022-08-22The Transposh WordPress Translation WordPress plugin before 1.0.8 does not sanitise and escape the a parameter via an AJAX action (available to both unauthenti…