CVE-2025-68021

CVE-2025-68021 is a Missing Authorization / Broken Access Control vulnerability in the WordPress ConveyThis Translate plugin ( ConveyThis conveythis-translate ), affecting versions up to and including 269.6. The issue enables exploitation via access-control misconfigurations, with a CVSS v3.1 bas...

CVE-2025-68021 WordPress ConveyThis plugin <= 269.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in ConveyThis ConveyThis conveythis-translate allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ConveyThis: from n/a through = 269.9...

CVE-2024-38792: Missing Authorization

Missing Authorization vulnerability in ConveyThis Translate Team Language Translate Widget for WordPress – ConveyThis allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Language Translate Widget for WordPress – ConveyThis: from n/a through 234...

CVE-2023-6811: Improper Neutralization of Input During Web Page Generation

The Language Translate Widget for WordPress – ConveyThis plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'apikey’ parameter in all versions up to, and including, 223 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...