Vulnerabilities

TI-2023-01059 CVE-2023-1119 · GHSA-2fmj-pq77-gvj7

Multiple Plugins - Cross-Site Scripting From Third-party Library

MEDIUM 60

The WP-Optimize WordPress plugin before 3.2.13, SrbTransLatin WordPress plugin before 2.4.1 use a third-party library that removes the escaping on some HTML characters, leading to a cross-site scripting vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01244 Published 2023-07-10 Fixed in 3.2.13, 2.4.1

TI-2018-03902 CVE-2018-5369 · GHSA-9jmx-xc85-gw2x

The SrbTransLatin plugin 1.46 for WordPress has XSS via an srbtranslatoptions action to…

LOW 23

The SrbTransLatin plugin 1.46 for WordPress has XSS via an srbtranslatoptions action to wp-admin/options-general.php with a lang_identificator parameter.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00623 Published 2018-01-12 No fix listed CWE-79

TI-2018-03901 CVE-2018-5368 · GHSA-x6cf-x436-chgh

The SrbTransLatin plugin 1.46 for WordPress has CSRF via an srbtranslatoptions action to wp-admin/options-general.php.

LOW 39

The SrbTransLatin plugin 1.46 for WordPress has CSRF via an srbtranslatoptions action to wp-admin/options-general.php.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00642 Published 2018-01-12 No fix listed CWE-352

Vulnerabilities

Filters

Multiple Plugins - Cross-Site Scripting From Third-party Library

The SrbTransLatin plugin 1.46 for WordPress has XSS via an srbtranslatoptions action to…

The SrbTransLatin plugin 1.46 for WordPress has CSRF via an srbtranslatoptions action to wp-admin/options-general.php.