Unauthorized Setting Changes in Transposh WordPress Translation Plugin

CVE-2022-2536

What is CVE-2022-2536?

The Transposh WordPress Translation plugin is impacted by a vulnerability that allows unauthenticated users to modify site settings unchecked. This occurs due to inadequate validation on the 'tp_translation' AJAX action. Attackers can exploit this weakness to override the 'Who can translate' option, particularly when the plugin's auto-translate feature is enabled by default. This security flaw enables unauthorized manipulation of displayed data, raising significant concerns for the integrity of WordPress websites using the plugin.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References