WordPress ConveyThis Translate plugin <= 234 - Non-arbitrary Options Update vulnerability

Non-arbitrary Options Update vulnerability discovered by Humberto Castelo Branco Patchstack Alliance in WordPress Plugin ConveyThis versions = 234...

WordPress plugin WP Translate security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WordPress WP Translate Plugin <= 5.3.0 is vulnerable to Broken Access Control

Software WP Translate Type Plugin Vulnerable versions = 5.3.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-35663 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID f6afb15c80c3 Credits Majed Refaea Required privilege...

CVE-2023-49161 WordPress Bravo Translate Plugin <= 1.2 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Guelben Bravo Translate.This issue affects Bravo Translate: from n/a through 1.2...

WordPress Bravo Translate Plugin <= 1.2 is vulnerable to SQL Injection

Software Bravo Translate Type Plugin Vulnerable versions = 1.2 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-49161 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 9e3d902f085a Credits Arvandy Required privilege Administrator Published 28...

CVE-2023-26515

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Ko Takagi Simple Slug Translate plugin = 2.7.2 versions...

CVE-2023-0832

The Under Construction plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.96. This is due to missing or incorrect nonce validation on the installweglot function called via the adminactioninstallweglot action. This makes it possible for...

Cross site request forgery (csrf)

The Under Construction plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.96. This is due to missing or incorrect nonce validation on the installweglot function called via the adminactioninstallweglot action. This makes it possible for...

PT-2023-16556 · Unknown +1 · Weglot Translate +1

Name of the Vulnerable Software and Affected Versions: Under Construction plugin for WordPress versions up to and including 3.96 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the install weglot function called via the admin action...

io.sysmo:nchecks (0.9.0), io.takari.polyglot:polyglot-ruby (>=0.1.10, <=0.1.12) +4 more potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (1.7.20)

org.jruby:jruby-stdlib MAVEN version 1.7.20 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - io.sysmo:nchecks 0.9.0 - io.takari.polyglot:polyglot-ruby =0.1.10, =0.1.10, =0.1.12 - org.jruby:jruby 1.7.20 -...

io.sysmo:nchecks (0.9.0), io.takari.polyglot:polyglot-ruby (>=0.1.10, <=0.1.12) +4 more potentially affected by CVE-2018-1000074 via org.jruby:jruby-stdlib (1.7.20)

org.jruby:jruby-stdlib MAVEN version 1.7.20 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - io.sysmo:nchecks 0.9.0 - io.takari.polyglot:polyglot-ruby =0.1.10, =0.1.10, =0.1.12 - org.jruby:jruby 1.7.20 -...

io.takari.polyglot:polyglot-ruby (>=0.1.13, <=0.1.14), io.takari.polyglot:polyglot-translate-plugin (>=0.1.13, <=0.1.14) +3 more potentially affected by CVE-2018-1000074 via org.jruby:jruby-stdlib (1.7.22)

org.jruby:jruby-stdlib MAVEN version 1.7.22 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - io.takari.polyglot:polyglot-ruby =0.1.13, =0.1.13, =0.1.14 - org.jruby:jruby 1.7.22 - org.jruby:jruby-complete...

io.sysmo:nchecks (0.9.0), io.takari.polyglot:polyglot-ruby (>=0.1.10, <=0.1.12) +4 more potentially affected by CVE-2018-1000077 via org.jruby:jruby-stdlib (1.7.20)

org.jruby:jruby-stdlib MAVEN version 1.7.20 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - io.sysmo:nchecks 0.9.0 - io.takari.polyglot:polyglot-ruby =0.1.10, =0.1.10, =0.1.12 - org.jruby:jruby 1.7.20 -...

io.takari.polyglot:polyglot-ruby (>=0.1.13, <=0.1.14), io.takari.polyglot:polyglot-translate-plugin (>=0.1.13, <=0.1.14) +3 more potentially affected by CVE-2018-1000077 via org.jruby:jruby-stdlib (1.7.22)

org.jruby:jruby-stdlib MAVEN version 1.7.22 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - io.takari.polyglot:polyglot-ruby =0.1.13, =0.1.13, =0.1.14 - org.jruby:jruby 1.7.22 - org.jruby:jruby-complete...

io.takari.polyglot:polyglot-ruby (>=0.1.13, <=0.1.14), io.takari.polyglot:polyglot-translate-plugin (>=0.1.13, <=0.1.14) +3 more potentially affected by CVE-2018-1000078 via org.jruby:jruby-stdlib (1.7.22)

org.jruby:jruby-stdlib MAVEN version 1.7.22 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - io.takari.polyglot:polyglot-ruby =0.1.13, =0.1.13, =0.1.14 - org.jruby:jruby 1.7.22 - org.jruby:jruby-complete...

io.takari.polyglot:polyglot-ruby (>=0.1.13, <=0.1.14), io.takari.polyglot:polyglot-translate-plugin (>=0.1.13, <=0.1.14) +3 more potentially affected by CVE-2018-1000073 via org.jruby:jruby-stdlib (1.7.22)

org.jruby:jruby-stdlib MAVEN version 1.7.22 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - io.takari.polyglot:polyglot-ruby =0.1.13, =0.1.13, =0.1.14 - org.jruby:jruby 1.7.22 - org.jruby:jruby-complete...

io.sysmo:nchecks (0.9.0), io.takari.polyglot:polyglot-ruby (>=0.1.10, <=0.1.12) +4 more potentially affected by CVE-2018-1000073 via org.jruby:jruby-stdlib (1.7.20)

org.jruby:jruby-stdlib MAVEN version 1.7.20 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - io.sysmo:nchecks 0.9.0 - io.takari.polyglot:polyglot-ruby =0.1.10, =0.1.10, =0.1.12 - org.jruby:jruby 1.7.20 -...

CVE-2022-0765

The Loco Translate WordPress plugin before 2.6.1 does not properly remove inline events from elements in the source translation strings before outputting them in the editor in the plugin admin panel, allowing any user with access to the plugin Translator and Administrator by default to add...

CVE-2022-0765

The Loco Translate WordPress plugin before 2.6.1 does not properly remove inline events from elements in the source translation strings before outputting them in the editor in the plugin admin panel, allowing any user with access to the plugin Translator and Administrator by default to add...

PT-2022-13421

Name of the Vulnerable Software and Affected Versions Loco Translate WordPress plugin versions prior to 2.6.1 Description The issue allows any user with access to the plugin, such as Translator and Administrator, to add arbitrary javascript payloads to the source strings, leading to a stored...