Read the docs

ConveyThis

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

ConveyThis records in CISA KEV

No ConveyThis vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2023-06223 CVE-2023-6811 · GHSA-qg75-vrpw-cgq6

Language Translate Widget for WordPress – ConveyThis <= 223 - Unauthenticated Stored Cross-Site Scripting via api_key

Priority LOW 38

The Language Translate Widget for WordPress – ConveyThis plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'api_key’ parameter in all versions up to, and including, 223 due to insufficient input s…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00389 Published 2024-04-11 No fix listed CWE-79
TI-2025-41630 CVE-2025-68021 · GHSA-3mfv-m4f8-5m67

WordPress ConveyThis plugin <= 269.9 - Broken Access Control vulnerability

Priority LOW 35

Missing Authorization vulnerability in ConveyThis ConveyThis conveythis-translate allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ConveyThis: from n/a through <= 269.9.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00375 Published 2026-02-20 No fix listed CWE-862
TI-2025-35772 CVE-2025-57919 · GHSA-438x-xp6g-ppjf

WordPress ConveyThis plugin <= 269.1 - PHP Object Injection vulnerability

Priority LOW 35

Deserialization of Untrusted Data vulnerability in ConveyThis ConveyThis conveythis-translate allows Object Injection.This issue affects ConveyThis: from n/a through <= 269.1.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00667 Published 2025-09-22 No fix listed CWE-502
TI-2025-38474 CVE-2025-62152 · GHSA-9p3v-jpmg-r6x6

WordPress ConveyThis plugin <= 269.2 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in ConveyThis ConveyThis conveythis-translate allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ConveyThis: from n/a through <= 269.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00254 Published 2025-12-09 No fix listed CWE-862
Open these records in search →