CVE-2022-25812

HIGH

Transposh WordPress Translation < 1.0.8 - Authenticated Remote Code Execution via Debug Settings

Title source: llm
STIX 2.1

Description

The Transposh WordPress Translation WordPress plugin before 1.0.8 does not validate its debug settings, which could allow allowing high privilege users such as admin to perform RCE

References (1)

Core 1
Core References
Exploit, Third Party Advisory x_refsource_misc
https://wpscan.com/vulnerability/1f6bd346-4743-44b8-86d7-4fbe09bad657

Scores

CVSS v3 7.2
EPSS 0.0144
EPSS Percentile 69.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-94
Status published
Products (1)
transposh/transposh_wordpress_translation < 1.0.8
Published Aug 22, 2022
Tracked Since Feb 18, 2026