CVE-2022-25812

CVE-2022-25812: Transposh WordPress Translation < 1.0.8 - Admin+ RCE

Vendor Unknown
Product Transposh WordPress Translation
Weakness CWE-94 · Code injection
Published August 22, 2022
Last update August 3, 2024

CVSS base score

What the vulnerability does

01Description

The Transposh WordPress Translation WordPress plugin before 1.0.8 does not validate its debug settings, which could allow allowing high privilege users such as admin to perform RCE

Key dates

02Disclosure timeline

August 22, 2022 CVE published
August 3, 2024 Record updated