CVE-2022-3141

CVE-2022-3141 is an authenticated SQL injection vulnerability affecting the Translate Multilingual sites WordPress plugin prior to version 2.3.3. An authenticated attacker can exploit this by adding a new language with specific special characters, bypassing SQL query backticks to inject a time-based blind payload. With a CVSS score of 8.8 (HIGH), this vulnerability allows for high impact on confidentiality, integrity, and availability, requiring only low privileges and no user interaction. While not on the KEV or Hot List, an exploit is publicly available on ExploitDB (EDB-51043), though there is no evidence of active exploitation, Metasploit/Nuclei modules, or significant community discussion or media coverage.