Transposh Transposh WordPress Translation
9 CVEs affecting Transposh Transposh WordPress Translation. Latest disclosed: 2022-12-15. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-25812 | High | 7.2 | 2022-08-22 | The Transposh WordPress Translation WordPress plugin before 1.0.8 does not validate its debug settings, which could allow allowing high privilege users such as… |
CVE-2022-25811 | High | 7.2 | 2022-08-22 | The Transposh WordPress Translation WordPress plugin through 1.0.8 does not sanitise and escape the order and orderby parameters before using them in a SQL sta… |
CVE-2022-25810 | Medium | 6.5 | 2022-08-22 | The Transposh WordPress Translation WordPress plugin through 1.0.8 exposes a couple of sensitive actions such has “tp_reset” under the Utilities tab (/wp-admin… |
CVE-2021-24910 | Medium | 6.1 | 2022-08-22 | The Transposh WordPress Translation WordPress plugin before 1.0.8 does not sanitise and escape the a parameter via an AJAX action (available to both unauthenti… |
CVE-2021-24912 | Medium | 5.4 | 2022-08-22 | The Transposh WordPress Translation WordPress plugin before 1.0.8 does not have CSRF check in its tp_translation AJAX action, which could allow attackers to ma… |
CVE-2021-24911 | Medium | 5.4 | 2022-08-22 | The Transposh WordPress Translation WordPress plugin before 1.0.8 does not sanitise and escape the tk0 parameter from the tp_translation AJAX action, leading t… |
CVE-2022-2536 | Medium | 5.3 | 2022-12-15 | The Transposh WordPress Translation plugin for WordPress is vulnerable to unauthorized setting changes by unauthenticated users in versions up to, and includin… |
CVE-2022-2462 | Medium | 5.3 | 2022-09-06 | The Transposh WordPress Translation plugin for WordPress is vulnerable to sensitive information disclosure to unauthenticated users in versions up to, and incl… |
CVE-2022-2461 | Medium | 5.3 | 2022-09-06 | The Transposh WordPress Translation plugin for WordPress is vulnerable to unauthorized setting changes by unauthenticated users in versions up to, and includin… |