CVE-2022-0770

The Translate WordPress with GTranslate plugin through version 2.9.8 and Translate WordPress – Google Language Translator through version 6.0.13 lack adequate permission validation in their debug functionality, allowing an attacker to write sensitive information including administrator cookies to a publicly accessible file when debug mode is enabled via the enable_debug parameter. An attacker could exploit this by tricking an administrator into visiting a specially crafted URL, potentially compromising admin session credentials.

Based on public CVE data (MITRE/NVD).