Unrated severityNVD Advisory· Published Aug 22, 2022· Updated Aug 3, 2024

Transposh WordPress Translation <= 1.0.8 - Admin+ SQL Injection

CVE-2022-25811

Description

The Transposh WordPress Translation WordPress plugin through 1.0.8 does not sanitise and escape the order and orderby parameters before using them in a SQL statement, leading to a SQL injection

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Transposh/Transposh Wordpress Translationllm-fuzzy2 versions
<=1.0.8+ 1 more
- (no CPE)range: <=1.0.8
- (no CPE)range: 1.0.8

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/0e0d2c5f-3396-4a0a-a5c6-6a98de3802c9mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000