Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2022-3691

DeepL Pro API Translation < 1.7.5 - API Key Disclosure

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The DeepL Pro API translation plugin WordPress plugin before 1.7.5 discloses sensitive information (including the DeepL API key) in files that are publicly accessible to an external, unauthenticated visitor.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown DeepL Pro API translation plugin

Default version status: unaffected

  • 0 to < 1.7.5affected

References