CVE-2022-2461

概要

参考情報

• packetstormsecurity.com/files/167870/wptransposh107-auth.txt · Exploit
• plugins.trac.wordpress.org/browser/transposh-translation-filter-for-wordpress/trunk/transposh.php · Patch
• exploitalert.com/view-details.html · Exploit
• rcesecurity.com/2022/07/WordPress-Transposh-Exploiting-a-Blind-SQL-Injection-via-XSS · Exploit
• wordfence.com/threat-intel/vulnerabilities/id/223373fc-9d78-47f0-b283-109f8e00b802 · Third Party Advisory
• wordfence.com/vulnerability-advisories · Third Party Advisory

transposh wordpress translation のその他の脆弱性

• CVE-2022-2536中 5.3The Transposh WordPress Translation plugin for WordPress is vulnerable to unauthorized setting changes by unauthenticated users in versions …
• CVE-2022-2462中 5.3The Transposh WordPress Translation plugin for WordPress is vulnerable to sensitive information disclosure to unauthenticated users in versi…
• CVE-2022-25812高 7.2The Transposh WordPress Translation WordPress plugin before 1.0.8 does not validate its debug settings, which could allow allowing high priv…
• CVE-2022-25811高 7.2The Transposh WordPress Translation WordPress plugin through 1.0.8 does not sanitise and escape the order and orderby parameters before usin…
• CVE-2022-25810中 6.5The Transposh WordPress Translation WordPress plugin through 1.0.8 exposes a couple of sensitive actions such has “tp_reset” under the Utili…