Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-87020
HistoryNov 23, 2022 - 12:00 a.m.

WordPress DeepL Pro API translation information leakage vulnerability

2022-11-2300:00:00
China National Vulnerability Database
www.cnvd.org.cn
10
wordpress
deepl pro api
information leakage
vulnerability
php language
blogging platforms
plugin
log files
attackers
sensitive information
wordpress foundation

0.002 Low

EPSS

Percentile

62.1%

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. An information disclosure vulnerability exists in versions of WordPress prior to DeepL Pro API translation 1.7.5. The vulnerability stems from the plugin’s inadequate protection of sensitive information, which can be exploited by attackers to obtain sensitive information such as DeepL API keys in log files.

0.002 Low

EPSS

Percentile

62.1%

Related for CNVD-2022-87020