Vulnerability · Published Sep 6, 2022 · Assigned by Wordfence
CVE-2022-2462Transposh WordPress Translation <= 1.0.9.6 - Sensitive Information Disclosure
Medium 5.3
In plain English
A medium-severity information exposure in Transposh WordPress Translation from oferwald. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 3.8% (higher than 90% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei.
Official description
The Transposh WordPress Translation plugin for WordPress is vulnerable to sensitive information disclosure to unauthenticated users in versions up to, and including, 1.0.9.6. This is due to insufficient permissions checking on the 'tp_history' AJAX action and insufficient restriction on the data returned in the response. This makes it possible for unauthenticated users to exfiltrate usernames of individuals who have translated text.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| oferwald | Transposh WordPress Translation | 0 – through 1.0.9.6 |
Weakness: CWE-200 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
References
- https://www.wordfence.com/threat-intel/vulnerabilities/id/bd1f12ac-86ac-4be9-9575-98381c3b4291?source=cve
- https://plugins.trac.wordpress.org/browser/transposh-translation-filter-for-wordpress/trunk/transposh.php?rev=2682425#L1948
- https://www.wordfence.com/vulnerability-advisories/#CVE-2022-2462
- https://www.rcesecurity.com/2022/07/WordPress-Transposh-Exploiting-a-Blind-SQL-Injection-via-XSS/
- https://packetstormsecurity.com/files/167878/wptransposh1081-disclose.txt
- https://github.com/oferwald/transposh/blob/master/transposh.php#L1550