CVE-2022-0770: vulnerability in Translate WordPress with GTranslate
Translate WordPress with GTranslate < 2.9.9 - CSRF to Account Takeover
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.6%
The Translate WordPress with GTranslate WordPress plugin before 2.9.9 does not have CSRF check in some files, and write debug data such as user's cookies in a publicly accessible file if a specific parameter is used when requesting them. Combining those two issues, an attacker could gain access to a logged in admin cookies by making them open a malicious link or page
Affected products
Unknown · Translate WordPress with GTranslateRelated CVEs — Translate WordPress with GTranslate
In the same product, most dangerous first.