CVE-2022-2462

MEDIUMNuclei

Transposh WordPress Translation <= 1.0.9.6 - Sensitive Information Disclosure

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2022-2462 has a selected CVSS score of 5.3 (medium); EIP currently links 1 Nuclei template.

Description

The Transposh WordPress Translation plugin for WordPress is vulnerable to sensitive information disclosure to unauthenticated users in versions up to, and including, 1.0.9.6. This is due to insufficient permissions checking on the 'tp_history' AJAX action and insufficient restriction on the data returned in the response. This makes it possible for unauthenticated users to exfiltrate usernames of individuals who have translated text.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Oct 15, 2024 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Transposh WordPress Translation

Browse oferwald / Transposh WordPress Translation

Default status: unaffected

CVE ListThrough 1.0.9.6affected

Nuclei templates

1
ProjectDiscoveryMEDIUMWordPress Transposh <=1.0.8.1 - Information DisclosureCVSS 5.3

WordPress Transposh plugin through is susceptible to information disclosure via the AJAX action tp_history, which is intended to return data about who has translated a text given by the token parameter. However, the plugin also returns the user's login name as part of the user_login attribute. If an anonymous user submits the translation, the user's IP address is returned. An attacker can leak the WordPress username of translators and potentially execute other unauthorized operations.

Impact

An attacker can exploit this vulnerability to gain sensitive information from the target system.

Remediation

Upgrade to the latest version of the WordPress Transposh plugin (>=1.0.8.2) to mitigate this vulnerability.

WeaknessesCWE-200
Authorsdwisiswant0
Template tagscvecve2022wordpressdisclosurewp-pluginpacketstormtransposhxssvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CPE: cpe:2.3:a:transposh:transposh_wordpress_translation:*:*:*:*:*:wordpress:*:*
https://packetstormsecurity.com/files/167878/wptransposh1081-disclose.txt https://github.com/oferwald/transposh https://www.rcesecurity.com/2022/07/WordPress-Transposh-Exploiting-a-Blind-SQL-Injection-via-XSS/ https://www.wordfence.com/vulnerability-advisories/#CVE-2022-2462 https://nvd.nist.gov/vuln/detail/CVE-2022-2462

Source: ProjectDiscovery

References

7