CVE-2022-25812: falha em Transposh WordPress Translation
Transposh WordPress Translation < 1.0.8 - Admin+ RCE
Publicada em · Atualizada em
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 1.7%
probabilidade de exploração
1.7%top 23% das CVEs
exploração observada
nãonenhuma fonte reporta
The Transposh WordPress Translation WordPress plugin before 1.0.8 does not validate its debug settings, which could allow allowing high privilege users such as admin to perform RCE
Produtos afetados
Unknown · Transposh WordPress TranslationCVEs relacionadas — Transposh WordPress Translation
No mesmo produto, das mais perigosas para as menos.
CVE-2021-24910—Transposh WordPress Translation < 1.0.8 - Reflected Cross-Site ScriptingEPSS 1.6%CVE-2022-25811—Transposh WordPress Translation <= 1.0.8 - Admin+ SQL InjectionEPSS 1.4%CVE-2022-25810—Transposh WordPress Translation <= 1.0.8 - Subscriber+ Unauthorised CallsEPSS 1.0%CVE-2021-24911—Transposh WordPress Translation < 1.0.8 - Stored Cross-Site ScriptingEPSS 0.7%CVE-2021-24912—Transposh WordPress Translation < 1.0.8 - CSRF to Stored XSSEPSS 0.3%