Vulnerabilities

TI-2024-06370 CVE-2024-6869 · GHSA-v69c-3f9p-xq6p

Falang multilanguage for WordPress <= 1.3.52 - Missing Authorization to Translation Update and Information Exposure

LOW 31

The Falang multilanguage for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all versions up to, and including, 1.3.52.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00312 Published 2024-08-08 No fix listed CWE-862

TI-2024-20219 CVE-2024-30495 · GHSA-fc9p-94fp-8jcw

WordPress Falang multilanguage for WordPress plugin <= 1.3.47 - SQL Injection vulnerability

LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Faboba Falang multilanguage.This issue affects Falang multilanguage: from n/a through 1.3.47.

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00574 Published 2024-03-29 No fix listed CWE-89

TI-2023-19400 CVE-2023-37968 · GHSA-6xc8-q286-22cw

WordPress Falang multilanguage Plugin <= 1.3.39 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Faboba Falang multilanguage for WordPress plugin <= 1.3.39 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00248 Published 2023-07-17 No fix listed CWE-352

Vulnerabilities

Filters

Falang multilanguage for WordPress <= 1.3.52 - Missing Authorization to Translation Update and Information Exposure

WordPress Falang multilanguage for WordPress plugin <= 1.3.47 - SQL Injection vulnerability

WordPress Falang multilanguage Plugin <= 1.3.39 is vulnerable to Cross Site Request Forgery (CSRF)