CVE-2022-3691

🗓️ 21 Nov 2022 00:00:00Reported by WPScanType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 112 Views

The DeepL Pro API translation plugin WordPress plugin before 1.7.5 discloses sensitive information (including the DeepL API key) in files that are publicly accessible to an external, unauthenticated visitor

Reporter	Title	Published	Views	Family All 11
CNNVD	WordPress plugin DeepL Pro API translation 安全特征问题漏洞	21 Nov 202200:00	–	cnnvd
CNVD	WordPress DeepL Pro API translation information disclosure vulnerability	23 Nov 202200:00	–	cnvd
Cvelist	CVE-2022-3691 DeepL Pro API Translation < 1.7.5 - API Key Disclosure	21 Nov 202200:00	–	cvelist
EUVD	EUVD-2022-43050	3 Oct 202520:07	–	euvd
NVD	CVE-2022-3691	21 Nov 202211:15	–	nvd
OSV	CVE-2022-3691	21 Nov 202211:15	–	osv
Patchstack	WordPress DeepL Pro API Translation plugin <= 1.7.4 - API Key Disclosure vulnerability	31 Oct 202200:00	–	patchstack
Prion	Code injection	21 Nov 202211:15	–	prion
Positive Technologies	PT-2022-23687 · WordPress · Deepl Pro Api Translation Plugin	21 Nov 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-3691	22 May 202523:09	–	redhatcve

NVD

Vulners

Node

fluenx deepl_pro_api_translationRange<1.7.5wordpress

[
  {
    "vendor": "Unknown",
    "product": "DeepL Pro API translation plugin",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThan": "1.7.5"
      }
    ],
    "defaultStatus": "unaffected",
    "collectionURL": "https://wordpress.org/plugins"
  }
]