Lucene search

K
patchstackDave Jong (Patchstack)PATCHSTACK:D087B45EE7D41AA93BEE318F19E47DC1
HistoryNov 09, 2022 - 12:00 a.m.

WordPress WPML Multilingual CMS premium plugin <= 4.5.13 - Cross-Site Request Forgery (CSRF) vulnerability

2022-11-0900:00:00
Dave Jong (Patchstack)
patchstack.com
14
wordpress
wpml
multilingual cms
csrf
vulnerability
patchstack
status change
translation job
update

EPSS

0.001

Percentile

20.8%

Cross-Site Request Forgery (CSRF) vulnerability leading to status change of translation job discovered by Dave Jong (Patchstack) in WordPress WPML Multilingual CMS premium plugin (versions <= 4.5.13).

Solution

           Update the WordPress Multilingual CMS plugin to the latest available version (at least 4.5.14).

EPSS

0.001

Percentile

20.8%

Related for PATCHSTACK:D087B45EE7D41AA93BEE318F19E47DC1