Lucene search
PRIOn knowledge basePRION:CVE-2022-4169HistoryNov 28, 2022 - 6:15 p.m.
Authorization
2022-11-2818:15:00
PRIOn knowledge base
www.prio-n.com
6
polylang
plugin translation
theme translation
authorization bypass
capability checks
unauthenticated attackers
update settings
import strings
The Theme and plugin translation for Polylang is vulnerable to authorization bypass in versions up to, and including, 3.2.16 due to missing capability checks in the process_polylang_theme_translation_wp_loaded() function. This makes it possible for unauthenticated attackers to update plugin and theme translation settings and to import translation strings.
| CPE | Name | Operator | Version |
|---|---|---|---|
| theme_and_plugin_translation_for_polylang | lt | 3.2.17 |
Related
wpvulndb
wpvulndb
cve
cve
CVE-2022-4169
2022-11-28 18:15:12
nvd
nvd
CVE-2022-4169
2022-11-28 18:15:12
cvelist
cvelist
CVE-2022-4169
2022-11-28 17:33:31