Vulnerabilities

TI-2023-10987 CVE-2023-25711 · GHSA-mjx3-85v5-g4m5

WordPress WPGlobus Translate Options Plugin <= 2.1.0 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPGlobus WPGlobus Translate Options plugin <= 2.1.0 versions.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0034 Published 2023-04-07 No fix listed CWE-79

TI-2018-03900 CVE-2018-5367 · GHSA-qf99-3qrg-g97q

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobus_option[post_type][post]…

LOW 24

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobus_option[post_type][post] parameter to wp-admin/options.php.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00805 Published 2018-01-12 Fixed in 1.9.7 CWE-79

TI-2018-03899 CVE-2018-5366 · GHSA-35mh-f6p8-pj2c

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobus_option[more_languages]…

LOW 23

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobus_option[more_languages] parameter to wp-admin/options.php.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00748 Published 2018-01-12 Fixed in 1.9.7 CWE-79

TI-2018-03898 CVE-2018-5365 · GHSA-mg4m-v9fc-9hcc

The WPGlobus plugin 1.9.6 for WordPress has XSS via the…

LOW 23

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobus_option[selector_wp_list_pages][show_selector] parameter to wp-admin/options.php.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00748 Published 2018-01-12 Fixed in 1.9.7 CWE-79

TI-2018-03897 CVE-2018-5364 · GHSA-v9h6-53fx-gh4j

The WPGlobus plugin 1.9.6 for WordPress has XSS via the…

LOW 24

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobus_option[browser_redirect][redirect_by_language] parameter to wp-admin/options.php.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00805 Published 2018-01-12 Fixed in 1.9.7 CWE-79

TI-2018-03896 CVE-2018-5363 · GHSA-gpq5-vqvx-ch9j

The WPGlobus plugin 1.9.6 for WordPress has XSS via the…

LOW 23

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobus_option[enabled_languages][en] or wpglobus_option[enabled_languages][fr] (or any other language) parameter to wp-admin/options.php.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00748 Published 2018-01-12 Fixed in 1.9.7 CWE-79

TI-2018-03895 CVE-2018-5362 · GHSA-599g-r6x7-jm4x

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobus_option[post_type][page]…

LOW 24

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobus_option[post_type][page] parameter to wp-admin/options.php.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00805 Published 2018-01-12 Fixed in 1.9.7 CWE-79

TI-2018-03894 CVE-2018-5361 · GHSA-6fxc-v8wq-849g

The WPGlobus plugin 1.9.6 for WordPress has CSRF via wp-admin/options.php.

MEDIUM 40

The WPGlobus plugin 1.9.6 for WordPress has CSRF via wp-admin/options.php.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01024 Published 2018-01-12 Fixed in 1.9.7 CWE-352

Vulnerabilities

Filters