Vulnerability index

Browse CVEs

9 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Transposh Wordpress Translation MEDIUM 5.3
CVE-2022-2536

The Transposh WordPress Translation plugin for WordPress is vulnerable to unauthorized setting changes by unauthenticated users in versions up to, an…

Fix: after 1.0.8.1
Fix from $1,600 2022-12-15
Transposh Wordpress Translation MEDIUM 5.3
CVE-2022-2461

The Transposh WordPress Translation plugin for WordPress is vulnerable to unauthorized setting changes by unauthenticated users in versions up to, an…

Fix: after 1.0.8.1
Fix from $1,600 2022-09-06
Transposh Wordpress Translation MEDIUM 5.3
CVE-2022-2462

The Transposh WordPress Translation plugin for WordPress is vulnerable to sensitive information disclosure to unauthenticated users in versions up to…

Fix: after 1.0.8.1
Fix from $1,600 2022-09-06
Transposh Wordpress Translation HIGH 7.2
CVE-2022-25811

The Transposh WordPress Translation WordPress plugin through 1.0.8 does not sanitise and escape the order and orderby parameters before using them in…

Fix: after 1.0.8
Fix from $1,950 2022-08-22
Transposh Wordpress Translation HIGH 7.2
CVE-2022-25812

The Transposh WordPress Translation WordPress plugin before 1.0.8 does not validate its debug settings, which could allow allowing high privilege use…

Fix: 1.0.8+
Fix from $1,950 2022-08-22
Transposh Wordpress Translation MEDIUM 6.5
CVE-2022-25810

The Transposh WordPress Translation WordPress plugin through 1.0.8 exposes a couple of sensitive actions such has “tp_reset” under the Utilities tab …

Fix: after 1.0.8
Fix from $1,600 2022-08-22
Transposh Wordpress Translation MEDIUM 6.1
CVE-2021-24910

The Transposh WordPress Translation WordPress plugin before 1.0.8 does not sanitise and escape the a parameter via an AJAX action (available to both …

Fix: 1.0.8+
Fix from $1,600 2022-08-22
Transposh Wordpress Translation MEDIUM 5.4
CVE-2021-24911

The Transposh WordPress Translation WordPress plugin before 1.0.8 does not sanitise and escape the tk0 parameter from the tp_translation AJAX action,…

Fix: 1.0.8+
Fix from $1,600 2022-08-22
Transposh Wordpress Translation MEDIUM 5.4
CVE-2021-24912

The Transposh WordPress Translation WordPress plugin before 1.0.8 does not have CSRF check in its tp_translation AJAX action, which could allow attac…

Fix: 1.0.8+
Fix from $1,600 2022-08-22