CVE-2022-3141
Translatepress Multilinugal < 2.3.3 - Admin+ SQLi
The Translate Multilingual sites WordPress plugin before 2.3.3 is vulnerable to an authenticated SQL injection. By adding a new language (via the settings page) containing specific special characters, the backticks in the SQL query can be surpassed and a time-based blind payload can be injected.
Affected products
Unknown · Translate Multilingual sites – TranslatePresspublic PoCs found — 3
githubgithub.com/Tomoe-12/CVE_2022_3141★ 1cve_referencepacketstormsecurity.com/files/171479/WordPress-Translatepress-Multilingual-SQL-Injection.htmlunverifiedexploitdbwww.exploit-db.com/exploits/51043unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →References
http://packetstormsecurity.com/files/171479/WordPress-Translatepress-Multilingual-SQL-Injection.htmlhttps://medium.com/%40elias.hohl/authenticated-sql-injection-vulnerability-in-translatepress-multilingual-wordpress-plugin-effc08eda514https://wpscan.com/vulnerability/1fa355d1-cca8-4b27-9d21-0b420a2e1bf3