CVE-2022-2461Disclosure(transposh / transposh_wordpress_translation)

LOWCVSS 5.3 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

The Transposh WordPress Translation plugin for WordPress is vulnerable to unauthorized setting changes by unauthenticated users in versions up to, and including, 1.0.9.6. This is due to insufficient permissions checking on the 'tp_translation' AJAX action and default settings which makes it possible for unauthenticated attackers to influence the data shown on the site.

transposh CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Patch / fix

Exploit / PoC references

Vendor / third-party advisories

Weakness type (CWE)

CWE-862

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

transposh_wordpress_translation

Threat summary

1 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
Disclosure: 1 classified signal
1 total mentions across 1 day

Affected systems

Vendors

transposh

Products

transposh_wordpress_translation

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Disclosure

1100.0%

Referenced assets1 URL

By indicator

https://cloud.projectdiscovery.io/library/CVE-2022-2461

Full discourse1 post

pdnuclei-bot@pdnuclei_bot137d
Disclosure
🚨 CVE-2022-2461 - medium 🚨 Transposh WordPress Translation <= 1.0.8 - Unauthenticated Settings Change > The Transposh WordPress Translation plugin for WordPress is vulnerable to unauthorize... 👾 https://cloud.projectdiscovery.io/library/CVE-2022-2461 @pdnuclei #NucleiTempl...
Post summary
A medium severity vulnerability (CVE‑2022‑2461) affecting the Transposh WordPress Translation plugin (<= 1.0.8) allowing unauthenticated settings changes is disclosed, with no exploit, patch, or proven active exploitation referenced.
0001067
952 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	transposh	transposh_wordpress_translation	-	wordpress	-

Explore more

Back to dashboard transposh CVEs transposh_wordpress_translation vulnerabilities