{"vulnerability": "cve-2022-2461", "sightings": [{"uuid": "7267165d-72e2-4021-b09e-642c04dddb9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2461", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lz2qayx6up25", "content": "", "creation_timestamp": "2025-09-17T21:02:37.928992Z"}, {"uuid": "a15d33c5-c7e7-4639-b6fb-e3e8646d0a67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2461", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-2461.yaml", "content": "", "creation_timestamp": "2025-09-16T05:39:12.000000Z"}, {"uuid": "740fe4cd-25c9-406f-ab0e-574d628d2c64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24611", "type": "seen", "source": "https://t.me/cibsecurity/42856", "content": "\u203c CVE-2022-24611 \u203c\n\nDenial of Service (DoS) in the Z-Wave S0 NonceGet protocol specification in Silicon Labs Z-Wave 500 series allows local attackers to block S0/S2 protected Z-Wave network via crafted S0 NonceGet Z-Wave packages, utilizing included but absent NodeIDs.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-17T22:27:53.000000Z"}, {"uuid": "7b0be2ef-50dc-40e8-bd8f-ad880b5e3e85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24614", "type": "seen", "source": "https://t.me/cibsecurity/37995", "content": "\u203c CVE-2022-24614 \u203c\n\nWhen reading a specially crafted JPEG file, metadata-extractor up to 2.16.0 can be made to allocate large amounts of memory that finally leads to an out-of-memory error even for very small inputs. This could be used to mount a denial of service attack against services that use metadata-extractor library.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-24T18:14:46.000000Z"}, {"uuid": "439a2870-ca80-45e9-8525-c0af3c0cfc16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24612", "type": "seen", "source": "https://t.me/cibsecurity/38082", "content": "\u203c CVE-2022-24612 \u203c\n\nAn authenticated user can upload an XML file containing an XSS via the ITSM module of EyesOfNetwork 5.3.11, resulting in a stored XSS.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-25T14:20:35.000000Z"}, {"uuid": "3b76d354-71be-4e8b-b7a1-2cfc131a8c7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24613", "type": "seen", "source": "https://t.me/cibsecurity/38004", "content": "\u203c CVE-2022-24613 \u203c\n\nmetadata-extractor up to 2.16.0 can throw various uncaught exceptions while parsing a specially crafted JPEG file, which could result in an application crash. This could be used to mount a denial of service attack against services that use metadata-extractor library.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-24T18:14:59.000000Z"}, {"uuid": "7eea46aa-1ffe-48ce-9f98-93582f70e580", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2461", "type": "seen", "source": "https://t.me/hacking_Attack/63493", "content": "Exploit Collector\nTransposh WordPress Translation 1.0.7 Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-Lnl-ZxRP9Iw/WWlvEVwqA2I/AAAAAAAAIK8/WG2BCM3S_lsUOouuCwhP5sp3j7hYzeO-wCLcBGAs/s1600/h133.png Transposh WordPress Translation versions 1.0.7 and below have an ajax action \"tp_translation\" which is available to authenticated or unauthenticated users (see CVE-2022-2461) that allows them to submit new translations. Translations submitted this way are shown on the Transposh administrative interface on the pages \"tp_main\" and \"tp_editor\". However, since the plugin does not properly validate and sanitize the submitted translation, arbitrary Javascript code can be permanently injected and executed directly within the backend across all users visiting the page with the roles of at least \"Subscriber\" and up to \"Administrator\".\n\nSHA-256 | 484332c9e36ec88f8a190cc80119a1f22da60e0f49e9a327a7f7268bba597fb7Download RCE Security Advisory\nhttps://www.rcesecurity.com\n1. ADVISORY INFORMATION\n=======================\nProduct:        Transposh WordPress Translation\nVendor URL:     https://wordpress.org/plugins/transposh-translation-filter-for-wordpress/\nType:           Cross-Site Scripting [CWE-79]\nDate found:     2021-08-19\nDate published: 2022-07-22\nCVSSv3 Score:   6.1 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)\nCVE:            CVE-2021-24911\n2. CREDITS\n==========\nThis vulnerability was discovered and researched by Julien Ahrens from\nRCE Security.\n3. VERSIONS AFFECTED\n====================\nTransposh WordPress Translation 1.0.7 and below\n4. INTRODUCTION\n===============\nTransposh translation filter for WordPress offers a unique approach to blog\ntranslation. It allows your blog to combine automatic translation with human\ntranslation aided by your users with an easy to use in-context interface.\n\n(from the vendor's homepage)\n5. VULNERABILITY DETAILS\n========================\nThe plugin's ajax action \"tp_translation\" which is available to authenticated or\nunauthenticated users (see CVE-2022-2461) allows to submit new translations.\n\nTranslations submitted this way are shown on the Transposh administrative\ninterface on the pages \"tp_main\" and \"tp_editor\". However, since the plugin does\nnot properly validate and sanitize the submitted translation, arbitrary Javascript\ncode can be permanently injected and executed directly within the backend across\nall users visiting the page with the roles of at least \"Subscriber\" and up to\n\"Administrator\".\n\nThis offers a wide range of possible attacks, such as redirecting the user to a\nmalicious page, spoofing content on the page, or attacking the browser and its\nplugins.\n6. PROOF OF CONCEPT\n===================\nThe following PoC adds a new translation:\n7. SOLUTION\n===========\nUpdate the plugin to version 1.0.8.1\n8. REPORT TIMELINE\n==================\n2021-08-19: Discovery of the vulnerability\n2021-08-20: Contacted the vendor via their contact form\n2021-08-20: Vendor response\n2021-08-20: Sent all the PoC exploits\n2021-08-20: Vendor acknowledges the issues\n2021-09-14: Requested status update from vendor\n2021-10-07: No response from vendor, requested status update again\n2021-10-25: CVE requested from WPScan (CNA)\n2021-10-27: WPScan assigns CVE-2021-24911\n2022-02-22: Vendor releases 1.0.8, which fixes this vulnerability\n2022-07-22: Public disclosure\n9. REFERENCES\n=============\nhttps://github.com/MrTuxracer/advisories\nhttps://transposh.org/version-1-0-8-thanks-julien/\nhttps://www.rcesecurity.com/2022/07/WordPress-Transposh-Exploiting-a-Blind-SQL-Injection-via-XSS/ Source:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:01:33.066709Z"}, {"uuid": "8d384d06-22fb-4d19-a9b6-314af005fa97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2461", "type": "seen", "source": "https://t.me/hacking_Attack/63497", "content": "Exploit Collector\nTransposh WordPress Translation 1.0.7 Incorrect Authorization\n\nhttps://3.bp.blogspot.com/-S_42fggy9lU/WWlvmFk_l6I/AAAAAAAAIRE/4fLLQglySPcuo1eoPxnOCfdodS4kW3PlwCLcBGAs/s1600/hack_img3.png \nTransposh WordPress Translation versions 1.0.7 and below suffer from an incorrect authorization vulnerability. When installed, Transposh comes with a set of pre-configured options, one of these is the \"Who can translate\" setting under the \"Settings\" tab, which by default allows \"Anonymous\" users to add translations via the plugin's \"tp_translation\" ajax action. Successful exploits can allow an unauthenticated attacker to add translations to the WordPress site and thereby influence what is actually shown on the site.\n\nSHA-256 | c25e589bc0f339822e669aa5ee336af340896bf3579587f6ad8e5c6ae0691179\n\nDownload\nRCE Security Advisory\nhttps://www.rcesecurity.com\n1. ADVISORY INFORMATION\n=======================\nProduct:        Transposh WordPress Translation\nVendor URL:     https://wordpress.org/plugins/transposh-translation-filter-for-wordpress/\nType:           Incorrect Authorization [CWE-863]\nDate found:     2022-07-13\nDate published: 2022-07-22\nCVSSv3 Score:   7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)\nCVE:            CVE-2022-2461\n2. CREDITS\n==========\nThis vulnerability was discovered and researched by Julien Ahrens from\nRCE Security.\n3. VERSIONS AFFECTED\n====================\nTransposh WordPress Translation 1.0.8.1 and below\n4. INTRODUCTION\n===============\nTransposh translation filter for WordPress offers a unique approach to blog\ntranslation. It allows your blog to combine automatic translation with human\ntranslation aided by your users with an easy to use in-context interface.\n\n(from the vendor's homepage)\n5. VULNERABILITY DETAILS\n========================\nWhen installed Transposh comes with a set of pre-configured options, one of these\nis the \"Who can translate\" setting under the \"Settings\" tab, which by default\nallows \"Anonymous\" users to add translations via the plugin's \"tp_translation\"\najax action.\n\nSuccessful exploits can allow an unauthenticated attacker to add translations to\nthe WordPress site and thereby influence what is actually shown on the site.\n6. PROOF OF CONCEPT\n===================\nThe following Proof-of-Concept adds a new translation\n\nPOST /wp-admin/admin-ajax.php HTTP/2\nHost: [host]\nContent-Length: 75\nCache-Control: max-age=0\nUpgrade-Insecure-Requests: 1\nContent-Type: application/x-www-form-urlencoded\nUser-Agent: Mozilla/5.0\n\naction=tp_translation&ln0=en&sr0=rcesecurity.com&items=1&tk0=rcesecurity.com&tr0=rcesecurity.com\n7. SOLUTION\n===========\nNone. Remove the plugin to prevent exploitation.\n8. REPORT TIMELINE\n==================\n2022-07-13: Discovery of the vulnerability\n2022-07-13: CVE requested from WPScan (CNA)\n2022-07-18: No response from WPScan\n2022-07-18: CVE requested from Wordfence (CNA) instead\n2022-07-18: Sent note to vendor\n2022-07-18: Wordfence assigns CVE-2022-2461\n2022-07-20: Since there are currently no plans to provide fixes at all:\n2022-07-22: Public disclosure\n9. REFERENCES\n=============\nhttps://github.com/MrTuxracer/advisories\nhttps://www.rcesecurity.com/2022/07/WordPress-Transposh-Exploiting-a-Blind-SQL-Injection-via-XSS/\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:01:32.820392Z"}, {"uuid": "08840376-7892-4b31-83ff-4bbd5c36153e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2461", "type": "seen", "source": "https://t.me/hacking_Attack/63497", "content": "Exploit Collector\nTransposh WordPress Translation 1.0.7 Incorrect Authorization\n\nhttps://3.bp.blogspot.com/-S_42fggy9lU/WWlvmFk_l6I/AAAAAAAAIRE/4fLLQglySPcuo1eoPxnOCfdodS4kW3PlwCLcBGAs/s1600/hack_img3.png \nTransposh WordPress Translation versions 1.0.7 and below suffer from an incorrect authorization vulnerability. When installed, Transposh comes with a set of pre-configured options, one of these is the \"Who can translate\" setting under the \"Settings\" tab, which by default allows \"Anonymous\" users to add translations via the plugin's \"tp_translation\" ajax action. Successful exploits can allow an unauthenticated attacker to add translations to the WordPress site and thereby influence what is actually shown on the site.\n\nSHA-256 | c25e589bc0f339822e669aa5ee336af340896bf3579587f6ad8e5c6ae0691179\n\nDownload\nRCE Security Advisory\nhttps://www.rcesecurity.com\n1. ADVISORY INFORMATION\n=======================\nProduct:        Transposh WordPress Translation\nVendor URL:     https://wordpress.org/plugins/transposh-translation-filter-for-wordpress/\nType:           Incorrect Authorization [CWE-863]\nDate found:     2022-07-13\nDate published: 2022-07-22\nCVSSv3 Score:   7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)\nCVE:            CVE-2022-2461\n2. CREDITS\n==========\nThis vulnerability was discovered and researched by Julien Ahrens from\nRCE Security.\n3. VERSIONS AFFECTED\n====================\nTransposh WordPress Translation 1.0.8.1 and below\n4. INTRODUCTION\n===============\nTransposh translation filter for WordPress offers a unique approach to blog\ntranslation. It allows your blog to combine automatic translation with human\ntranslation aided by your users with an easy to use in-context interface.\n\n(from the vendor's homepage)\n5. VULNERABILITY DETAILS\n========================\nWhen installed Transposh comes with a set of pre-configured options, one of these\nis the \"Who can translate\" setting under the \"Settings\" tab, which by default\nallows \"Anonymous\" users to add translations via the plugin's \"tp_translation\"\najax action.\n\nSuccessful exploits can allow an unauthenticated attacker to add translations to\nthe WordPress site and thereby influence what is actually shown on the site.\n6. PROOF OF CONCEPT\n===================\nThe following Proof-of-Concept adds a new translation\n\nPOST /wp-admin/admin-ajax.php HTTP/2\nHost: [host]\nContent-Length: 75\nCache-Control: max-age=0\nUpgrade-Insecure-Requests: 1\nContent-Type: application/x-www-form-urlencoded\nUser-Agent: Mozilla/5.0\n\naction=tp_translation&ln0=en&sr0=rcesecurity.com&items=1&tk0=rcesecurity.com&tr0=rcesecurity.com\n7. SOLUTION\n===========\nNone. Remove the plugin to prevent exploitation.\n8. REPORT TIMELINE\n==================\n2022-07-13: Discovery of the vulnerability\n2022-07-13: CVE requested from WPScan (CNA)\n2022-07-18: No response from WPScan\n2022-07-18: CVE requested from Wordfence (CNA) instead\n2022-07-18: Sent note to vendor\n2022-07-18: Wordfence assigns CVE-2022-2461\n2022-07-20: Since there are currently no plans to provide fixes at all:\n2022-07-22: Public disclosure\n9. REFERENCES\n=============\nhttps://github.com/MrTuxracer/advisories\nhttps://www.rcesecurity.com/2022/07/WordPress-Transposh-Exploiting-a-Blind-SQL-Injection-via-XSS/\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:01:43.147584Z"}, {"uuid": "cd981a8d-74e0-4e70-80d0-35eff97e2752", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2461", "type": "seen", "source": "https://t.me/hacking_Attack/63493", "content": "Exploit Collector\nTransposh WordPress Translation 1.0.7 Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-Lnl-ZxRP9Iw/WWlvEVwqA2I/AAAAAAAAIK8/WG2BCM3S_lsUOouuCwhP5sp3j7hYzeO-wCLcBGAs/s1600/h133.png Transposh WordPress Translation versions 1.0.7 and below have an ajax action \"tp_translation\" which is available to authenticated or unauthenticated users (see CVE-2022-2461) that allows them to submit new translations. Translations submitted this way are shown on the Transposh administrative interface on the pages \"tp_main\" and \"tp_editor\". However, since the plugin does not properly validate and sanitize the submitted translation, arbitrary Javascript code can be permanently injected and executed directly within the backend across all users visiting the page with the roles of at least \"Subscriber\" and up to \"Administrator\".\n\nSHA-256 | 484332c9e36ec88f8a190cc80119a1f22da60e0f49e9a327a7f7268bba597fb7Download RCE Security Advisory\nhttps://www.rcesecurity.com\n1. ADVISORY INFORMATION\n=======================\nProduct:        Transposh WordPress Translation\nVendor URL:     https://wordpress.org/plugins/transposh-translation-filter-for-wordpress/\nType:           Cross-Site Scripting [CWE-79]\nDate found:     2021-08-19\nDate published: 2022-07-22\nCVSSv3 Score:   6.1 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)\nCVE:            CVE-2021-24911\n2. CREDITS\n==========\nThis vulnerability was discovered and researched by Julien Ahrens from\nRCE Security.\n3. VERSIONS AFFECTED\n====================\nTransposh WordPress Translation 1.0.7 and below\n4. INTRODUCTION\n===============\nTransposh translation filter for WordPress offers a unique approach to blog\ntranslation. It allows your blog to combine automatic translation with human\ntranslation aided by your users with an easy to use in-context interface.\n\n(from the vendor's homepage)\n5. VULNERABILITY DETAILS\n========================\nThe plugin's ajax action \"tp_translation\" which is available to authenticated or\nunauthenticated users (see CVE-2022-2461) allows to submit new translations.\n\nTranslations submitted this way are shown on the Transposh administrative\ninterface on the pages \"tp_main\" and \"tp_editor\". However, since the plugin does\nnot properly validate and sanitize the submitted translation, arbitrary Javascript\ncode can be permanently injected and executed directly within the backend across\nall users visiting the page with the roles of at least \"Subscriber\" and up to\n\"Administrator\".\n\nThis offers a wide range of possible attacks, such as redirecting the user to a\nmalicious page, spoofing content on the page, or attacking the browser and its\nplugins.\n6. PROOF OF CONCEPT\n===================\nThe following PoC adds a new translation:\n7. SOLUTION\n===========\nUpdate the plugin to version 1.0.8.1\n8. REPORT TIMELINE\n==================\n2021-08-19: Discovery of the vulnerability\n2021-08-20: Contacted the vendor via their contact form\n2021-08-20: Vendor response\n2021-08-20: Sent all the PoC exploits\n2021-08-20: Vendor acknowledges the issues\n2021-09-14: Requested status update from vendor\n2021-10-07: No response from vendor, requested status update again\n2021-10-25: CVE requested from WPScan (CNA)\n2021-10-27: WPScan assigns CVE-2021-24911\n2022-02-22: Vendor releases 1.0.8, which fixes this vulnerability\n2022-07-22: Public disclosure\n9. REFERENCES\n=============\nhttps://github.com/MrTuxracer/advisories\nhttps://transposh.org/version-1-0-8-thanks-julien/\nhttps://www.rcesecurity.com/2022/07/WordPress-Transposh-Exploiting-a-Blind-SQL-Injection-via-XSS/ Source:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:01:43.390098Z"}]}