696 matches found
CVE-2024-38792: Missing Authorization
Missing Authorization vulnerability in ConveyThis Translate Team Language Translate Widget for WordPress – ConveyThis allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Language Translate Widget for WordPress – ConveyThis: from n/a through 234...
CVE-2024-9434
The WPGlobus Translate Options plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.0. This is due to missing or incorrect nonce validation on the ontranslateoptionspage function. This makes it possible for unauthenticated attackers to inject...
CVE-2024-9434 WPGlobus Translate Options <= 2.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
The WPGlobus Translate Options plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.0. This is due to missing or incorrect nonce validation on the ontranslateoptionspage function. This makes it possible for unauthenticated attackers to inject...
CVE-2024-9434
CVE-2024-9434 affects the WordPress plugin WPGlobus Translate Options (
CVE-2024-9434 WPGlobus Translate Options <= 2.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
The WPGlobus Translate Options plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.0. This is due to missing or incorrect nonce validation on the ontranslateoptionspage function. This makes it possible for unauthenticated attackers to inject...
CVE-2024-9434: Cross-Site Request Forgery (CSRF)
The WPGlobus Translate Options plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.0. This is due to missing or incorrect nonce validation on the ontranslateoptionspage function. This makes it possible for unauthenticated attackers to inject...
WordPress plugin WPGlobus Translate Options 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
WordPress WPGlobus Translate Options plugin <= 2.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability
Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin WPGlobus Translate Options versions = 2.2.0...
WordPress WPGlobus Translate Options Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)
Software WPGlobus Translate Options Type Plugin Vulnerable versions = 2.2.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9434 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 5a84f04000eb Credits vgo0 Required...
PT-2024-39629 · WordPress · Wpglobus Translate Options
Name of the Vulnerable Software and Affected Versions: WPGlobus Translate Options plugin for WordPress versions up to, and including, 2.2.0 Description: The issue is due to missing or incorrect nonce validation on the on translate options page function, making it possible for unauthenticated...
Malicious code in translate-readme (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9887 Malicious code in translate-readme (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ml-translate-vis (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7fac763b65f8589de08fd31594652182e22966151af04e82dc7605d936b3189 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
softmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized read on the translate_fail path leading to an io_readx or io_writex crash. NOTE: a third party states that the Non-virtualization Use Case in the qemu.org reference applies here i.e. "Bugs affecting the non-virtualization use case are not considered security bugs at this time.
...
WordPress ConveyThis Translate plugin <= 234 - Non-arbitrary Options Update vulnerability
Non-arbitrary Options Update vulnerability discovered by Humberto Castelo Branco Patchstack Alliance in WordPress Plugin ConveyThis versions = 234...
WordPress Language Translate Widget for WordPress – ConveyThis Plugin <= 234 is vulnerable to Broken Access Control
Software Language Translate Widget for WordPress – ConveyThis Type Plugin Vulnerable versions = 234 Fixed in 235 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-38792 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID b86aa3788718...
TensorFlow has segmentation fault in tfg-translate
...
Malicious code in brakeman-translate_checkstyle_format (RubyGems)
--- -= Per source details. Do not edit below this line.=-...