PT-2025-24150 · Unknown · Global Translator

Name of the Vulnerable Software and Affected Versions: Global Translator versions n/a through 2.0.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...

WordPress plugin Global Translator 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forgery...

WordPress plugin Global Translator 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

WordPress Global Translator plugin <= 2.0.2 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nabil Irawan in WordPress Plugin Global Translator versions = 2.0.2...

CVE-2024-0632

The Automatic Translator with Google Translate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom font setting in all versions up to, and including, 1.5.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

CVE-2023-5496

A vulnerability was found in Translator PoqDev Add-On 1.0.11 on Firefox. It has been rated as problematic. This issue affects some unknown processing of the component Select Text Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The complexity of an...

CVE-2023-38942

Dango-Translator v4.5.5 was discovered to contain a remote command execution RCE vulnerability via the component app/config/cloudconfig.json...

CVE-2023-50375

Missing Authorization vulnerability in edo888 Google Language Translator google-language-translator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Google Language Translator: from n/a through = 6.0.19...

CVE-2022-41182

Due to lack of proper memory management, when a victim opens manipulated Parasolid Part and Assembly .xb, CoreCadTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to t...

CVE-2022-3494

The Complianz WordPress plugin before 6.3.4, and Complianz Premium WordPress plugin before 6.3.6 allow a translators to inject arbitrary SQL through an unsanitized translation. SQL can be injected through an infected translation file, or by a user with a translator role through translation plugin...

Malicious code in nestjs-translator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0ceb5fa1318b74c2003c389bed9724f792a9755ee095548718c1aaead2bbaaf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4011 Malicious code in nestjs-translator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0ceb5fa1318b74c2003c389bed9724f792a9755ee095548718c1aaead2bbaaf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the MouseTooltipTranslator extension in the Google Chrome browser allows a hacker to perform an SSRF attack.

The vulnerability of the MouseTooltipTranslator extension in the Google Chrome browser is related to insufficient validation of requests on the server side. Exploiting this vulnerability can allow a malicious actor to perform an SSRF attack remotely...

CVE-2025-30621

Cross-Site Request Forgery CSRF vulnerability in kornelly Translator translator allows Stored XSS.This issue affects Translator: from n/a through = 0.3...

CVE-2025-30621

Cross-Site Request Forgery CSRF vulnerability in kornelly Translator translator allows Stored XSS.This issue affects Translator: from n/a through = 0.3...

CVE-2025-30621 WordPress Translator plugin <= 0.3 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in kornelly Translator translator allows Stored XSS.This issue affects Translator: from n/a through = 0.3...

CVE-2025-30621

CVE-2025-30621: In Translator, a CSRF-to-Stored XSS issue affects Translator plugin versions up to 0.3 (and from n/a as noted). Exploitation details are not provided; CVSS shows high impact with user interaction required. No remediation/fix details are present in the provided documents.

WordPress Translator plugin <= 0.3 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Translator versions = 0.3...

WordPress plugin Translator 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...

CVE-2025-25303 Server-Side Request Forgery (SSRF) in MouseTooltipTranslator

The MouseTooltipTranslator Chrome extension allows mouseover translation of any language at once. The MouseTooltipTranslator browser extension is vulnerable to SSRF attacks. The pdf.mjs script uses the URL parameter from the current URL as the file to download and display to the extension user...