Vulnerability Description
The Transposh WordPress Translation WordPress plugin through 1.0.8 exposes a couple of sensitive actions such has “tp_reset” under the Utilities tab (/wp-admin/admin.php?page=tp_utils), which can be used/executed as the lowest-privileged user. Basically all Utilities functionalities are vulnerable this way, which involves resetting configurations and backup/restore operations.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Transposh | Transposh Wordpress Translation | <= 1.0.8 |
Related Weaknesses (CWE)
References
- https://wpscan.com/vulnerability/9a934a84-f0c7-42ed-b980-bb168b2c5892ExploitThird Party Advisory
- https://wpscan.com/vulnerability/9a934a84-f0c7-42ed-b980-bb168b2c5892ExploitThird Party Advisory
FAQ
What is CVE-2022-25810?
CVE-2022-25810 is a vulnerability with a CVSS score of 6.5 (MEDIUM). The Transposh WordPress Translation WordPress plugin through 1.0.8 exposes a couple of sensitive actions such has “tp_reset” under the Utilities tab (/wp-admin/admin.php?page=tp_utils), which can be u...
How severe is CVE-2022-25810?
CVE-2022-25810 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-25810?
Check the references section above for vendor advisories and patch information. Affected products include: Transposh Transposh Wordpress Translation.