PT-2022-16766 · WordPress · Transposh Wordpress Translation Plugin

Julien Ahrens · Published 2022-07-29 · Updated 2024-01-11 · CVE-2022-2462

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Transposh WordPress Translation plugin versions up to, and including, 1.0.8.1

Description The issue is related to insufficient permissions checking on the 'tp history' AJAX action and insufficient restriction on the data returned in the response. This allows unauthenticated users to exfiltrate usernames of individuals who have translated text.

Recommendations For versions up to, and including, 1.0.8.1, consider disabling the 'tp history' AJAX action until a patch is available to prevent sensitive information disclosure. Restrict access to the data returned in the response to minimize the risk of exploitation.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2022-2462

Affected Products

Transposh Wordpress Translation Plugin

References · 10

• 🔥 https://wordfence.com/vulnerability-advisories/#CVE-2022-2462 · Exploit
• 🔥 https://packetstormsecurity.com/files/167878/wptransposh1081-disclose.txt · Exploit
• 🔥 https://rcesecurity.com/2022/07/WordPress-Transposh-Exploiting-a-Blind-SQL-Injection-via-XSS · Exploit
• https://plugins.trac.wordpress.org/browser/transposh-translation-filter-for-wordpress/trunk/transposh.php?rev=2682425#L1948 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-2462 · Security Note
• https://osv.dev/vulnerability/CVE-2022-2462 · Vendor Advisory
• https://github.com/oferwald/transposh/blob/master/transposh.php#L1550 · Note
• https://t.me/cibsecurity/49361 · Telegram Post
• https://t.me/defcon_news/102137 · Telegram Post
• https://wordfence.com/threat-intel/vulnerabilities/id/bd1f12ac-86ac-4be9-9575-98381c3b4291?source=cve · Note