CVE-2022-25811
The Transposh WordPress Translation WordPress plugin through 1.0.8 does not sanitise and escape the order and orderby parameters before using them in a SQL statement, leading to a SQL injection
- Affected products
- Transposh Wordpress Translation Plugin
- Transposh Transposh Wordpress Translation
- ≤ 1.0.8
- Fix
- Available
- CVSS 3.1
- 7.2 HIGH
- EPSS
- 1.2% (66th percentile)
- Weakness
- CWE-89
- NVD status
- Modified
- Published
- 2022-08-22
CVE-2022-25811 at NVD
4 known exploits for CVE-2022-25811
Proof-of-concept code and exploit modules indexed by Sploitus