CVE-2021-4452

CVE-2021-4452 affects the Google Language Translator plugin for WordPress (versions up to 6.0.9). The vulnerability is a Reflected Cross-Site Scripting flaw caused by insufficient input sanitization and output escaping in multiple parameters, enabling authenticated attackers to inject scripts in ...

CVE-2021-24594

CVE-2021-24594 affects the Translate WordPress – Google Language Translator plugin for WordPress up to version 6.0.12. The root cause is insufficient sanitization/escaping of certain plugin settings before output, allowing stored Cross-Site Scripting by high-privilege users even when unfiltered_h...

CVE-2016-10870

CVE-2016-10870 affects the WordPress google-language-translator plugin, with XSS in versions prior to 5.0.06. Root cause: insufficient validation of client-side data in the plugin. Impact: cross-site scripting via the plugin’s interfaces. Mitigation: upgrade to version 5.0.06 or later (as indicat...