Vulnerabilities

TI-2023-30891 CVE-2023-54413 · GHSA-p7q8-6fx6-c54g

Reflected cross-site scripting in WPML Multilingual CMS for WordPress

MEDIUM 56

WPML Multilingual CMS plugin for WordPress before 4.6.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying crafted input in the wp_lang parameter.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00315 Published 2026-10-22 Fixed in 4.6.1 CWE-79

TI-2023-19767 CVE-2023-38383 · GHSA-xx6h-c2fx-v78f

WordPress Language plugin <= 1.2.1 - Broken Access Control vulnerability

LOW 31

Missing Authorization vulnerability in OnTheGoSystems Language allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Language: from n/a through 1.2.1.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00539 Published 2024-12-13 No fix listed CWE-862

TI-2023-13811 CVE-2023-29431 · GHSA-v59g-pmpc-vmvg

WordPress qTranslate X Cleanup and WPML Import plugin <= 3.0.1 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in OntheGoSystems qTranslate X Cleanup and WPML Import allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects qTranslate X Cleanup and WPML Import:…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00395 Published 2024-12-09 No fix listed CWE-862

TI-2024-29595 CVE-2024-44006 · GHSA-4g9f-q2jm-5527

WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.3.7 - Broken Access Control vulnerability

LOW 38

Missing Authorization vulnerability in OnTheGoSystems WooCommerce Multilingual & Multicurrency woocommerce-multilingual.This issue affects WooCommerce Multilingual & Multicurrency: from n/a through 5.3.6.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00309 Published 2024-11-01 No fix listed CWE-862

TI-2024-20192 CVE-2024-30466 · GHSA-xvg6-w59c-3823

WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.3.4 - Broken Access Control vulnerability

LOW 38

Missing Authorization vulnerability in OnTheGoSystems WooCommerce Multilingual & Multicurrency.This issue affects WooCommerce Multilingual & Multicurrency: from n/a through 5.3.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00351 Published 2024-06-09 No fix listed CWE-862

TI-2024-21489 CVE-2024-32602 · GHSA-xcgj-mj4r-37f5

WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.3.3.1 - SQL Injection vulnerability

LOW 36

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in OnTheGoSystems WooCommerce Multilingual & Multicurrency.This issue affects WooCommerce Multilingual & Multicurrency: f…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00541 Published 2024-04-18 No fix listed CWE-89

TI-2023-12172 CVE-2023-27440 · GHSA-x25j-vg36-qv82

WordPress Toolset Types plugin <= 3.4.17 - Authenticated Arbitrary File Upload Vulnerability

LOW 33

Unrestricted Upload of File with Dangerous Type vulnerability in OnTheGoSystems Types.This issue affects Types: from n/a through 3.4.17.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00758 Published 2024-03-26 No fix listed CWE-434

TI-2022-18367 CVE-2022-38974 · GHSA-qj2c-6348-5hm7

WordPress WPML Multilingual CMS premium plugin <= 4.5.10 - Broken Access Control vulnerability

LOW 21

Broken Access Control vulnerability in WPML Multilingual CMS premium plugin <= 4.5.10 on WordPress allows users with subscriber or higher user roles to change the status of the translation jobs.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00556 Published 2022-11-18 No fix listed CWE-264

TI-2022-18085 CVE-2022-38461 · GHSA-9j68-9p63-wh2j

WordPress WPML Multilingual CMS premium plugin <= 4.5.10 - Broken Access Control vulnerability

LOW 25

Broken Access Control vulnerability in WPML Multilingual CMS premium plugin <= 4.5.10 on WordPress allows users with a subscriber or higher user role to change plugin settings (selected language for legacy widgets, the d…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00556 Published 2022-11-17 No fix listed CWE-264

TI-2022-22162 CVE-2022-45071 · GHSA-qvhw-8crc-phrj

WordPress WPML Multilingual CMS premium plugin <= 4.5.13 - Cross-Site Request Forgery (CSRF) vulnerability

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in WPML Multilingual CMS premium plugin <= 4.5.13 on WordPress.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00331 Published 2022-11-17 No fix listed CWE-352

TI-2022-22163 CVE-2022-45072 · GHSA-mj7q-4wg2-4j6x

WordPress WPML Multilingual CMS premium plugin <= 4.5.13 - Cross-Site Request Forgery (CSRF) vulnerability

LOW 20

Cross-Site Request Forgery (CSRF) vulnerability in WPML Multilingual CMS premium plugin <= 4.5.13 on WordPress.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00289 Published 2022-11-17 No fix listed CWE-352

TI-2020-08483 CVE-2020-10568 · GHSA-q75g-rrjh-783v

The sitepress-multilingual-cms (WPML) plugin before 4.3.7-b.2 for WordPress has CSRF due…

MEDIUM 41

The sitepress-multilingual-cms (WPML) plugin before 4.3.7-b.2 for WordPress has CSRF due to a loose comparison.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01705 Published 2020-03-14 No fix listed CWE-352

TI-2015-07793 CVE-2015-9416 · GHSA-wrxc-rpf3-vxwh

The sitepress-multilingual-cms (WPML) plugin 2.9.3 to 3.2.6 for WordPress has XSS via the Accept-Language HTTP header.

LOW 29

The sitepress-multilingual-cms (WPML) plugin 2.9.3 to 3.2.6 for WordPress has XSS via the Accept-Language HTTP header.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0102 Published 2019-09-25 No fix listed CWE-79

Vulnerabilities

Filters