Vulnerabilities

TI-2023-12178 CVE-2023-27446 · GHSA-j6hg-c78w-h2x4

WordPress DeepL Pro API translation Plugin <= 2.1.4 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Fluenx DeepL API translation plugin <= 2.1.4 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00312 Published 2023-11-22 No fix listed CWE-352

TI-2023-25122 CVE-2023-46620 · GHSA-mwhv-r97r-43pc

WordPress DeepL Pro API translation Plugin <= 2.3.9.1 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Fluenx DeepL API translation plugin <= 2.3.9.1 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00312 Published 2023-11-13 No fix listed CWE-352

TI-2022-03393 CVE-2022-3691 · GHSA-29rj-95hw-fhm9

DeepL Pro API Translation < 1.7.5 - API Key Disclosure

HIGH 66

The DeepL Pro API translation plugin WordPress plugin before 1.7.5 discloses sensitive information (including the DeepL API key) in files that are publicly accessible to an external, unauthenticated visitor.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0096 Published 2022-11-21 Fixed in 1.7.5 CWE-552

Vulnerabilities

Filters

WordPress DeepL Pro API translation Plugin <= 2.1.4 is vulnerable to Cross Site Request Forgery (CSRF)

WordPress DeepL Pro API translation Plugin <= 2.3.9.1 is vulnerable to Cross Site Request Forgery (CSRF)

DeepL Pro API Translation < 1.7.5 - API Key Disclosure