Lucene search
K

18 matches found

Vulnrichment
Vulnrichment
added 2026/02/20 3:46 p.m.1 views

CVE-2025-68021 WordPress ConveyThis plugin <= 269.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in ConveyThis ConveyThis conveythis-translate allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ConveyThis: from n/a through = 269.9...

6.5CVSS5.1AI score0.00056EPSS
Exploits0References1
CVE
CVE
added 2026/02/20 3:46 p.m.5 views

CVE-2025-68021

CVE-2025-68021 is a Missing Authorization / Broken Access Control vulnerability in the WordPress ConveyThis Translate plugin ( ConveyThis conveythis-translate ), affecting versions up to and including 269.6. The issue enables exploitation via access-control misconfigurations, with a CVSS v3.1 bas...

6.5CVSS5.8AI score0.00056EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/01/27 7:25 a.m.3 views

WordPress ConveyThis plugin <= 269.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by NumeX in WordPress Plugin ConveyThis versions = 269.6...

5.2AI score0.00056EPSS
Exploits0Affected Software1
Cvelist
Cvelist
added 2025/12/09 2:52 p.m.27 views

CVE-2025-62152 WordPress ConveyThis plugin <= 269.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in ConveyThis ConveyThis conveythis-translate allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ConveyThis: from n/a through = 269.2...

5.3CVSS0.00038EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/09 2:52 p.m.1 views

CVE-2025-62152 WordPress ConveyThis plugin <= 269.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in ConveyThis ConveyThis conveythis-translate allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ConveyThis: from n/a through = 269.2...

5.3CVSS5.1AI score0.00038EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/09 12:0 a.m.1 views

WordPress plugin ConveyThis 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin... A security...

5.3CVSS6.4AI score0.00038EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/11/29 5:1 p.m.2 views

WordPress ConveyThis plugin <= 269.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin ConveyThis versions = 269.2...

8.8CVSS5.4AI score0.00038EPSS
Exploits0Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-30745

Malicious code in bioql PyPI...

7.2CVSS6.5AI score0.00117EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-59022

Malicious code in bioql PyPI...

7.2CVSS6.4AI score0.0119EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/09/22 7:34 p.m.4 views

WordPress ConveyThis plugin <= 269.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by mcdruid in WordPress Plugin ConveyThis versions = 269.1...

7.2CVSS5.5AI score0.00117EPSS
Exploits0Affected Software1
Cvelist
Cvelist
added 2025/09/22 6:25 p.m.8 views

CVE-2025-57919 WordPress ConveyThis plugin <= 269.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ConveyThis ConveyThis conveythis-translate allows Object Injection.This issue affects ConveyThis: from n/a through = 269.1...

7.2CVSS0.00117EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/09/22 12:0 a.m.3 views

WordPress plugin ConveyThis 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code issue...

7.2CVSS6.8AI score0.00117EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 2:7 a.m.5 views

CVE-2023-6811

The Language Translate Widget for WordPress – ConveyThis plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'apikey’ parameter in all versions up to, and including, 223 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

7.2CVSS6.1AI score0.0119EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/11/01 12:0 a.m.1 views

WordPress plugin Language Translate Widget for WordPress – ConveyThis 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. WordPress plugin Language Translat...

5.3CVSS6.6AI score0.00324EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/07/22 12:0 a.m.7 views

WordPress Language Translate Widget for WordPress – ConveyThis Plugin <= 234 is vulnerable to Broken Access Control

Software Language Translate Widget for WordPress – ConveyThis Type Plugin Vulnerable versions = 234 Fixed in 235 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-38792 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID b86aa3788718...

5.3CVSS6.4AI score0.00324EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2024/04/11 1:51 a.m.76 views

CVE-2023-6811

CVE-2023-6811 affects the Language Translate Widget for WordPress – ConveyThis plugin. The vulnerability is a stored cross-site scripting (XSS) via the api_key parameter in all versions up to 223, caused by insufficient input sanitization and output escaping. Exploitation by unauthenticated users...

7.2CVSS6AI score0.0119EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/04/11 12:0 a.m.1 views

WordPress plugin ConveyThis 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

7.2CVSS6.6AI score0.0119EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/04/10 12:0 a.m.1 views

PT-2024-15095 · WordPress · Language Translate Widget For Wordpress – Conveythis

Name of the Vulnerable Software and Affected Versions: The Language Translate Widget for WordPress – ConveyThis plugin for WordPress versions up to, and including, 223 Description: The issue is related to Stored Cross-Site Scripting via the api key parameter due to insufficient input sanitization...

7.2CVSS6.6AI score0.0119EPSS
Exploits0References5
Rows per page
Query Builder