WordPress is the Wordpress Foundation’s set of blogging platform developed using the PHP language. The WordPress plugin is a WordPress open source application plugin. can be renamed to a PHP-terminated extension, allowing an authenticated “translator” user to inject PHP code into a PHP-terminated file in a web-accessible location. No details of the vulnerability are currently available.
CPE | Name | Operator | Version |
---|---|---|---|
wordpress plugin loco translate | lt | 2.5.4 |