Lucene search
WPScanCVELIST:CVE-2022-3691HistoryNov 21, 2022 - 12:00 a.m.
CVE-2022-3691 DeepL Pro API Translation < 1.7.5 - API Key Disclosure
2022-11-2100:00:00
WPScan
www.cve.org
4
deepl
pro
api
translation
wordpress
version
disclosure
EPSS
0.002
Percentile
62.0%
The DeepL Pro API translation plugin WordPress plugin before 1.7.5 discloses sensitive information (including the DeepL API key) in files that are publicly accessible to an external, unauthenticated visitor.
CNA Affected
[
{
"vendor": "Unknown",
"product": "DeepL Pro API translation plugin",
"versions": [
{
"status": "affected",
"versionType": "custom",
"version": "0",
"lessThan": "1.7.5"
}
],
"defaultStatus": "unaffected",
"collectionURL": "https://wordpress.org/plugins"
}
]Related
cnvd
cnvd
WordPress DeepL Pro API translation information leakage vulnerability
2022-11-23 00:00:00
patchstack
patchstack
cve
cve
CVE-2022-3691
2022-11-21 11:15:20
prion
prion
Code injection
2022-11-21 11:15:00
nvd
nvd
CVE-2022-3691
2022-11-21 11:15:20