Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-01489
HistoryAug 02, 2022 - 12:00 a.m.

WordPress Transposh WordPress Translation SQL Injection Vulnerability

2022-08-0200:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
wordpress
transposh
sql injection
vulnerability
validation
http parameter
database

EPSS

0.001

Percentile

37.7%

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Transposh WordPress Translation SQL injection vulnerability, which stems from a lack of validation of external input when a user provides input to the HTTP GET parameter. SQL statement validation, an attacker can use this vulnerability to execute illegal SQL commands to obtain sensitive database data.

EPSS

0.001

Percentile

37.7%