Transposh WordPress Translation

Transposh WordPress Translation has 9 disclosed vulnerabilities in the WordSec catalog, all reported in 2022; 6 are fixed and 3 remain unpatched as of September 2026. Their average CVSS score is 5.7, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high. 2022 was the busiest year with 9 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (22%). Other recurring categories include Missing Authorization, Cross-Site Request Forgery (CSRF).

6 of the records (67%) have a vendor fix, while 3 remain unpatched. The oldest unresolved one dates back to 2022.

All of these findings were reported by Julien Ahrens.

Strategic Overview

Avg CVSSMedium

5.7/ 10

Patch Coverage67%

Open

Fixed

Get automatic notifications for all Transposh WordPress Translation vulnerabilities before they are exploited.

Most severe open issueCVSS 5.3CVE-2022-2536

Transposh WordPress Translation <= 1.0.9.6 - Authorization Bypass

Read the full analysis

Vulnerability Records

9 records


2022-11-14 00:00	Transposh WordPress Translation <= 1.0.9.6 - Authorization Bypass Transposh WordPress Translation <= 1.0.9.6	`CVE-2022-2536`	5.3 Medium	Julien Ahrens	No
2022-07-22 00:00	Transposh WordPress Translation <= 1.0.9.1 - Missing Authorization Checks Transposh WordPress Translation <= 1.0.9.1	`CVE-2022-25810`	6.3 Medium	Julien Ahrens	Yes
2022-07-22 00:00	Transposh WordPress Translation <= 1.0.7 - Unauthenticated Stored Cross-Site Scripting via 'tp_translation' Transposh WordPress Translation <= 1.0.7	`CVE-2021-24911`	6.5 Medium	Julien Ahrens	Yes
2022-07-22 00:00	Transposh WordPress Translation <= 1.0.9.1 - Cross-Site Request Forgery Transposh WordPress Translation <= 1.0.9.1	`CVE-2021-24912`	4.3 Medium	Julien Ahrens	Yes
2022-07-22 00:00	Transposh WordPress Translation <= 1.0.9.1 - Remote Code Execution Transposh WordPress Translation <= 1.0.9.1	`CVE-2022-25812`	7.2 High	Julien Ahrens	Yes
2022-07-22 00:00	Transposh WordPress Translation <= 1.0.7 - Reflected Cross-Site Scripting via tp_tp Transposh WordPress Translation <= 1.0.7	`CVE-2021-24910`	6.1 Medium	Julien Ahrens	Yes
2022-07-22 00:00	Transposh WordPress Translation <= 1.0.9.1 - Authenticated (Admin+) SQL Injection via 'tp_editor' Transposh WordPress Translation <= 1.0.9.1	`CVE-2022-25811`	4.9 Medium	Julien Ahrens	Yes
2022-07-18 00:00	Transposh WordPress Translation <= 1.0.9.6 - Unauthorized Settings Change Transposh WordPress Translation <= 1.0.9.6	`CVE-2022-2461`	5.3 Medium	Julien Ahrens	No
2022-07-18 00:00	Transposh WordPress Translation <= 1.0.9.6 - Sensitive Information Disclosure Transposh WordPress Translation <= 1.0.9.6	`CVE-2022-2462`	5.3 Medium	Julien Ahrens	No

Showing 1–9 of 9 reports