Transposh Wordpress Translation (Unknown) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2022-08-22. Vendor: Unknown.

CVEs of Transposh Wordpress Translation

• CVE-2022-25812 - CVSS 7.2 (high), 2022-08-22: The Transposh WordPress Translation WordPress plugin before 1.0.8 does not validate its debug settings, which could allow allowing high privilege users such…
• CVE-2022-25811 - CVSS 7.2 (high), 2022-08-22: The Transposh WordPress Translation WordPress plugin through 1.0.8 does not sanitise and escape the order and orderby parameters before using them in a SQL…
• CVE-2022-25810 - CVSS 6.5 (medium), 2022-08-22: The Transposh WordPress Translation WordPress plugin through 1.0.8 exposes a couple of sensitive actions such has “tp_reset” under the Utilities tab…
• CVE-2021-24912 - CVSS 5.4 (medium), 2022-08-22: The Transposh WordPress Translation WordPress plugin before 1.0.8 does not have CSRF check in its tp_translation AJAX action, which could allow attackers to…
• CVE-2021-24911 - CVSS 5.4 (medium), 2022-08-22: The Transposh WordPress Translation WordPress plugin before 1.0.8 does not sanitise and escape the tk0 parameter from the tp_translation AJAX action, leading…
• CVE-2021-24910 - CVSS 6.1 (medium), 2022-08-22: The Transposh WordPress Translation WordPress plugin before 1.0.8 does not sanitise and escape the a parameter via an AJAX action (available to both…