Read the docs

OnTheGoSystems

Records13All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

OnTheGoSystems records in CISA KEV

No OnTheGoSystems vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Woocommerce Multilingual & Multicurrency 3 records LOW Sitepress-multilingual-cms 2 records MEDIUM

Records

13 records

TI-2023-30891 CVE-2023-54413 · GHSA-p7q8-6fx6-c54g

Reflected cross-site scripting in WPML Multilingual CMS for WordPress

Priority MEDIUM 56

WPML Multilingual CMS plugin for WordPress before 4.6.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying crafted input in the wp_lang parameter.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00315 Published 2026-10-22 Fixed in 4.6.1 CWE-79
TI-2024-21489 CVE-2024-32602 · GHSA-xcgj-mj4r-37f5

WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.3.3.1 - SQL Injection vulnerability

Priority LOW 36

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in OnTheGoSystems WooCommerce Multilingual & Multicurrency.This issue affects WooCommerce Multilingual & Multicurrency: f…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00541 Published 2024-04-18 No fix listed CWE-89
TI-2023-19767 CVE-2023-38383 · GHSA-xx6h-c2fx-v78f

WordPress Language plugin <= 1.2.1 - Broken Access Control vulnerability

Priority LOW 31

Missing Authorization vulnerability in OnTheGoSystems Language allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Language: from n/a through 1.2.1.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00539 Published 2024-12-13 No fix listed CWE-862
TI-2022-18085 CVE-2022-38461 · GHSA-9j68-9p63-wh2j

WordPress WPML Multilingual CMS premium plugin <= 4.5.10 - Broken Access Control vulnerability

Priority LOW 25

Broken Access Control vulnerability in WPML Multilingual CMS premium plugin <= 4.5.10 on WordPress allows users with a subscriber or higher user role to change plugin settings (selected language for legacy widgets, the d…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00556 Published 2022-11-17 No fix listed CWE-264
TI-2023-13811 CVE-2023-29431 · GHSA-v59g-pmpc-vmvg

WordPress qTranslate X Cleanup and WPML Import plugin <= 3.0.1 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in OntheGoSystems qTranslate X Cleanup and WPML Import allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects qTranslate X Cleanup and WPML Import:…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00395 Published 2024-12-09 No fix listed CWE-862
Open these records in search →