Lucene search

WPScanCVE-2022-25812

HistoryAug 22, 2022 - 3:15 p.m.

CVE-2022-25812

2022-08-2215:15:14

CWE-94

WPScan

web.nvd.nist.gov

cve-2022-25812

nvd

transposh

wordpress

translation

plugin

rce

security

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

44.9%

JSON

The Transposh WordPress Translation WordPress plugin before 1.0.8 does not validate its debug settings, which could allow allowing high privilege users such as admin to perform RCE

Affected configurations

Nvd

Vulners

Node

transposhtransposh_wordpress_translationRange<1.0.8wordpress

VendorProductVersionCPE
transposhtransposh_wordpress_translation*cpe:2.3:a:transposh:transposh_wordpress_translation:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
transposh	transposh_wordpress_translation	*	cpe:2.3:a:transposh:transposh_wordpress_translation::::::wordpress::*

CNA Affected

[
  {
    "product": "Transposh WordPress Translation",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "1.0.8",
        "status": "affected",
        "version": "1.0.8",
        "versionType": "custom"
      }
    ]
  }
]

References

wpscan.com/vulnerability/1f6bd346-4743-44b8-86d7-4fbe09bad657

Social References

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

44.9%

JSON

Related for CVE-2022-25812