Transposh Wordpress Translation
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:transposh_wordpress_translation:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Transposh Wordpress Translation (07afe450-871f-5b7f-a72e-009b410626ba) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-25812 |
vulnerable | 2026-06-08 05:41:49.500385 |
Transposh WordPress Translation < 1.0.8 - Admin+ RCE
The Transposh WordPress Translation WordPress plugin before 1.0.8 does not validate its debug settings, which could allow allowing high privilege users such as admin to perform RCE
Published: 2022-08-22T14:59:06.000Z
Updated: 2024-08-03T04:49:43.741Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25811 |
vulnerable | 2026-06-08 05:41:49.500084 |
Transposh WordPress Translation <= 1.0.8 - Admin+ SQL Injection
The Transposh WordPress Translation WordPress plugin through 1.0.8 does not sanitise and escape the order and orderby parameters before using them in a SQL statement, leading to a SQL injection
Published: 2022-08-22T14:58:47.000Z
Updated: 2024-08-03T04:49:44.141Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25810 |
vulnerable | 2026-06-08 05:41:49.498118 |
Transposh WordPress Translation <= 1.0.8 - Subscriber+ Unauthorised Calls
The Transposh WordPress Translation WordPress plugin through 1.0.8 exposes a couple of sensitive actions such has “tp_reset” under the Utilities tab (/wp-admin/admin.php?page=tp_utils), which can be used/executed as the lowest-privileged user. Basically all Utilities functionalities are vulnerable this way, which involves resetting configurations and backup/restore operations.
Published: 2022-08-22T14:58:31.000Z
Updated: 2024-08-03T04:49:43.477Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24912 |
vulnerable | 2026-06-08 05:30:39.612737 |
Transposh WordPress Translation < 1.0.8 - CSRF to Stored XSS
The Transposh WordPress Translation WordPress plugin before 1.0.8 does not have CSRF check in its tp_translation AJAX action, which could allow attackers to make authorised users add a translation. Given the lack of sanitisation in the tk0 parameter, this could lead to a Stored Cross-Site Scripting issue which will be executed in the context of a logged in admin
Published: 2022-08-22T14:56:37.000Z
Updated: 2024-08-03T19:49:13.475Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24911 |
vulnerable | 2026-06-08 05:30:39.612400 |
Transposh WordPress Translation < 1.0.8 - Stored Cross-Site Scripting
The Transposh WordPress Translation WordPress plugin before 1.0.8 does not sanitise and escape the tk0 parameter from the tp_translation AJAX action, leading to Stored Cross-Site Scripting, which will trigger in the admin dashboard of the plugin. The minimum role needed to perform such attack depends on the plugin "Who can translate ?" setting.
Published: 2022-08-22T14:56:13.000Z
Updated: 2024-08-03T19:49:14.019Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24910 |
vulnerable | 2026-06-08 05:30:39.605880 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.