Transposh WordPress Translation vulnerabilities

2 known vulnerabilities in Transposh WordPress Translation from Transposh WordPress Translation. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  Transposh WordPress Translation: Improper Control of Generation of Code

  CVE-2022-25812Aug 22, 2022Transposh WordPress TranslationEPSS 1.72%

  The Transposh WordPress Translation WordPress plugin before 1.0.8 does not validate its debug settings, which could allow allowing high privilege users such as admin to perform RCE

• 7.2 High severity

  Transposh WordPress Translation: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-25811Aug 22, 2022Transposh WordPress TranslationEPSS 1.44%

  The Transposh WordPress Translation WordPress plugin through 1.0.8 does not sanitise and escape the order and orderby parameters before using them in a SQL statement, leading to a SQL injection