Malicious code in @next-translate-root/i18n (npm)

--- -= Per source details. Do not edit below this line.=-...

WordPress Loco Translate plugin <= 2.6.9 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nosa Shandy Patchstack Alliance in WordPress Plugin Loco Translate versions = 2.6.9...

WordPress Loco Translate Plugin <= 2.6.9 is vulnerable to Cross Site Request Forgery (CSRF)

Software Loco Translate Type Plugin Vulnerable versions = 2.6.9 Fixed in 2.6.10 OWASP Top 10 A4: Insecure Design Classification Cross Site Request Forgery CSRF CVE CVE-2024-37236 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID f02123bf72f2 Credits Nosa Shandy Required...

OPENSUSE-SU-2024:11473-1 python36-translate-toolkit-3.3.6-1.3 on GA media

These are all security issues fixed in the python36-translate-toolkit-3.3.6-1.3 package on the GA media of openSUSE Tumbleweed...

CVE-2024-35663

Missing Authorization vulnerability in HahnCreativeGroup WP Translate.This issue affects WP Translate: from n/a through 5.3.0...

CVE-2024-35663 WordPress WP Translate plugin <= 5.3.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in HahnCreativeGroup WP Translate.This issue affects WP Translate: from n/a through 5.3.0...

CVE-2024-35663

CVE-2024-35663 is a Missing Authorization vulnerability in HahnCreativeGroup WP Translate affecting WP Translate from n/a through 5.3.0. Public details indicate a Network attack vector with Low privileges required, and impact limited to Integrity/Availability (I/L) as per CVSS 3.1 metrics (base s...

CVE-2024-35663 WordPress WP Translate plugin <= 5.3.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in HahnCreativeGroup WP Translate.This issue affects WP Translate: from n/a through 5.3.0...

WordPress plugin WP Translate security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

Fedora: Security Advisory for rust-uu_tr (FEDORA-2024-40ee18b2e7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress WP Translate plugin <= 5.3.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Majed Refaea Patchstack Alliance in WordPress Plugin WP Translate versions = 5.3.0...

WordPress WP Translate Plugin <= 5.3.0 is vulnerable to Broken Access Control

Software WP Translate Type Plugin Vulnerable versions = 5.3.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-35663 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID f6afb15c80c3 Credits Majed Refaea Required privilege...

WordPress Automatic Translator with Auto Translate Plugin <= 1.5.4 is vulnerable to Cross Site Scripting (XSS)

Software Automatic Translator with Auto Translate Type Plugin Vulnerable versions = 1.5.4 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-0632 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 37c2d281da0f Credits...

CVE-2024-0632

The Automatic Translator with Google Translate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom font setting in all versions up to, and including, 1.5.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

CVE-2024-0632

CVE-2024-0632 affects the WordPress plugin Automatic Translator with Google Translate. It enables Stored Cross-Site Scripting via the custom font setting in all versions up to 1.5.4. The issue requires authenticated, administrator-level access and can affect multi-site installations or sites wher...

CVE-2024-0632 Automatic Translator with Google Translate <= 1.5.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via Custom Font

The Automatic Translator with Google Translate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom font setting in all versions up to, and including, 1.5.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

WordPress plugin Automatic Translator with Google Translate 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

Automatic Translator with Google Translate <= 1.5.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via Custom Font

Description The Automatic Translator with Google Translate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom font setting in all versions up to, and including, 1.5.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2024-33665

angular-translate through 2.19.1 allows XSS via a crafted key that is used by the translate directive. NOTE: the vendor indicates that there is no documentation indicating that a key is supposed to be safe against XSS attacks...

CVE-2024-33665

angular-translate through 2.19.1 allows XSS via a crafted key that is used by the translate directive. NOTE: the vendor indicates that there is no documentation indicating that a key is supposed to be safe against XSS attacks...