CVE-2022-25811: Transposh WordPress Translation

High severity, CVSS 7.2. EPSS: 1.4% chance of exploitation in the next 30 days.

The Transposh WordPress Translation WordPress plugin through 1.0.8 does not sanitise and escape the order and orderby parameters before using them in a SQL statement, leading to a SQL injection

Affected products

• Transposh Transposh WordPress Translation: up to and including 1.0.8

Published 2022-08-22. Last modified 2026-06-17.