The Greeklish-permalink WordPress plugin through 3.3 does not implement correct authorization or nonce checks in the cyrtrans_ajax_old AJAX action, allowing unauthenticated and low-privilege users to trigger the plugin's…
CVSS 3.1MEDIUM 4.3·Network·No auth·User interaction·EPSS 0.00265·Published 2023-07-10·Fixed in 3.5