blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2022-3691

HIGH 7.5 CVSS 3.1
Published
November 21, 2022
Last modified
June 17, 2026
NVD status
Modified
Reported by
contact@wpscan.com
Weakness
CWE-552
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

The DeepL Pro API translation plugin WordPress plugin before 1.7.5 discloses sensitive information (including the DeepL API key) in files that are publicly accessible to an external, unauthenticated visitor.

Affected products and versions

  • Unknown DeepL Pro API translation plugin — Before 1.7.5
  • fluenx deepl_pro_api_translation — Before 1.7.5

References

  • wpscan.com https://wpscan.com/vulnerability/4248a0af-1b7e-4e29-8129-3f40c1d0c560 Exploit, Third Party Advisory
  • nvd.nist.gov Official NVD record