Fluenx

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Fluenx records in CISA KEV

No Fluenx vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Deepl Pro Api Translation 2 records HIGH Deepl Api Translation 1 record LOW

Records

3 records

TI-2022-03393 CVE-2022-3691 · GHSA-29rj-95hw-fhm9

DeepL Pro API Translation < 1.7.5 - API Key Disclosure

HIGH 66

The DeepL Pro API translation plugin WordPress plugin before 1.7.5 discloses sensitive information (including the DeepL API key) in files that are publicly accessible to an external, unauthenticated visitor.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0096 Published 2022-11-21 Fixed in 1.7.5 CWE-552

TI-2023-25122 CVE-2023-46620 · GHSA-mwhv-r97r-43pc

WordPress DeepL Pro API translation Plugin <= 2.3.9.1 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Fluenx DeepL API translation plugin <= 2.3.9.1 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00312 Published 2023-11-13 No fix listed CWE-352

TI-2023-12178 CVE-2023-27446 · GHSA-j6hg-c78w-h2x4

WordPress DeepL Pro API translation Plugin <= 2.1.4 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Fluenx DeepL API translation plugin <= 2.1.4 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00312 Published 2023-11-22 No fix listed CWE-352

Open these records in search →

Critical	0
High	3
Medium	0
Low	0
No CVSS	0