7.5
High
CVE-2022-3691 The DeepL Pro API translation plugin WordPress plugin before 1.7.5 discloses sensitive information (including the…
Description
The DeepL Pro API translation plugin WordPress plugin before 1.7.5 discloses sensitive information (including the DeepL API key) in files that are publicly accessible to an external, unauthenticated visitor.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| DeepL Pro API translation plugin 1.7 | earliest → < 1.7.5 | 1.7.5 |