Lucene search
+L

533 matches found

CVE
CVE
added 2025/03/24 1:47 p.m.75 views

CVE-2025-30621

CVE-2025-30621: In Translator, a CSRF-to-Stored XSS issue affects Translator plugin versions up to 0.3 (and from n/a as noted). Exploitation details are not provided; CVSS shows high impact with user interaction required. No remediation/fix details are present in the provided documents.

7.1CVSS7.2AI score0.00161EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/24 1:47 p.m.30 views

CVE-2025-30621 WordPress Translator plugin <= 0.3 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in kornelly Translator translator allows Stored XSS.This issue affects Translator: from n/a through = 0.3...

7.1CVSS0.00161EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/03/24 1:07 p.m.7 views

WordPress Translator plugin <= 0.3 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Translator versions = 0.3...

7.1CVSS6.2AI score0.00161EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2025/03/24 12:00 a.m.8 views

WordPress plugin Translator 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...

7.1CVSS8.3AI score0.00161EPSS
SaveExploits0References2
OSV
OSV
added 2025/03/03 4:47 p.m.10 views

CVE-2025-25303 Server-Side Request Forgery (SSRF) in MouseTooltipTranslator

The MouseTooltipTranslator Chrome extension allows mouseover translation of any language at once. The MouseTooltipTranslator browser extension is vulnerable to SSRF attacks. The pdf.mjs script uses the URL parameter from the current URL as the file to download and display to the extension user...

6.9CVSS6.8AI score
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/02/06 4:20 a.m.16 views

CVE-2021-4452

The Google Language Translator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via multiple parameters in versions up to, and including, 6.0.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to inject arbitrary we...

7.1CVSS6AI score0.00484EPSS
SaveExploits0
NVD
NVD
added 2024/12/09 1:15 p.m.39 views

CVE-2023-50375

Missing Authorization vulnerability in edo888 Google Language Translator google-language-translator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Google Language Translator: from n/a through = 6.0.19...

5.3CVSS0.00542EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/09 11:29 a.m.29 views

CVE-2023-50375 WordPress Translate WordPress – Google Language Translator plugin <= 6.0.19 - Broken Access Control vulnerability

Missing Authorization vulnerability in edo888 Google Language Translator google-language-translator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Google Language Translator: from n/a through = 6.0.19...

5.3CVSS0.00542EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/09 11:29 a.m.60 views

CVE-2023-50375

CVE-2023-50375 affects the WordPress Google Language Translator plugin (versions

5.3CVSS5.8AI score0.00542EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/09 11:29 a.m.12 views

CVE-2023-50375 WordPress Translate WordPress – Google Language Translator plugin <= 6.0.19 - Broken Access Control vulnerability

Missing Authorization vulnerability in edo888 Google Language Translator google-language-translator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Google Language Translator: from n/a through = 6.0.19...

5.3CVSS5.1AI score0.00542EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/09 12:00 a.m.10 views

WordPress plugin Google Language Translator 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS6.7AI score0.00542EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/09 12:00 a.m.14 views

PT-2024-13930 · Google · Google Language Translator

Name of the Vulnerable Software and Affected Versions: Google Language Translator versions 6.0.19 and earlier Description: The issue is related to a Missing Authorization vulnerability in Translate AI Multilingual Solutions Google Language Translator, which allows exploiting incorrectly configure...

5.3CVSS6.9AI score0.00542EPSS
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/12/03 6:03 p.m.8 views

Malicious code in genz-translator (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 983b5b328e433d81113b3e170f313aba83ae5eff0ecd515fc9865ca3a5be1ee9 Installing the package installs a reverse shell. As the mentioned domain doesn't seem to exist, it may be a test designed for an internal usage --- Category:...

7.6AI score
SaveExploits0References1
OSV
OSV
added 2024/12/03 6:03 p.m.8 views

MAL-2024-12275 Malicious code in genz-translator (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 983b5b328e433d81113b3e170f313aba83ae5eff0ecd515fc9865ca3a5be1ee9 Installing the package installs a reverse shell. As the mentioned domain doesn't seem to exist, it may be a test designed for an internal usage --- Category:...

7.5AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/11/26 12:00 a.m.21 views

The vulnerability of the file conversion tools between different formats—PS/IGES Parasolid Translator and the simulation modeling application Simcenter Femap—allows a perpetrator to execute arbitrary code.

The vulnerability of the file conversion tools between different formats, such as PS/IGES Parasolid Translator and the simulation application Simcenter Femap, is related to reading data beyond the acceptable range in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary...

7.8CVSS7.6AI score0.0039EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/11/26 12:00 a.m.22 views

The vulnerability of the file conversion tools between different formats—PS/IGES Parasolid Translator and the simulation modeling application Simcenter Femap—allows a perpetrator to execute arbitrary code.

The vulnerability of the file conversion tools between different formats, such as PS/IGES Parasolid Translator and the simulation application Simcenter Femap, is related to reading data beyond the acceptable range in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary...

7.8CVSS7.6AI score0.0039EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/11/26 12:00 a.m.16 views

The vulnerability of the file conversion tools between different formats—PS/IGES Parasolid Translator and the simulation modeling application Simcenter Femap—allows a perpetrator to execute arbitrary code.

The vulnerability of the file conversion tools between different formats, such as PS/IGES Parasolid Translator and the simulation application Simcenter Femap, is related to errors in data type mixing. Exploiting this vulnerability can allow attackers to execute arbitrary code using specially...

7.8CVSS7.6AI score0.0039EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/11/26 12:00 a.m.13 views

The vulnerability of the file conversion tools between different formats—PS/IGES Parasolid Translator and the simulation modeling application Simcenter Femap—allows a perpetrator to execute arbitrary code.

The vulnerability of the file conversion tools between different formats, such as PS/IGES Parasolid Translator and the simulation application Simcenter Femap, is related to reading data beyond the acceptable range in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary...

7.8CVSS7.6AI score0.0039EPSS
SaveExploits0References5Affected Software2
Github Security Blog
Github Security Blog
added 2024/11/20 6:23 p.m.44 views

github.com/rancher/steve's users can issue watch commands for arbitrary resources

Impact A vulnerability has been discovered in Steve API Kubernetes API Translator in which users can watch resources they are not allowed to access, when they have at least some generic permissions on the type. For example, a user who can get a single secret in a single namespace can get all...

7.7CVSS7.3AI score0.00475EPSS
SaveExploits0References6Affected Software1
Patchstack
Patchstack
added 2024/10/16 12:26 p.m.10 views

WordPress Google Language Translator plugin <= 6.0.9 - Cross-Site Scripting vulnerability

Cross-Site Scripting vulnerability discovered by Ram in WordPress Plugin Google Language Translator versions 6.0.10...

7.1CVSS6.3AI score0.00484EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder