CVE-2021-24594

CVE-2021-24594 affects the Translate WordPress – Google Language Translator plugin for WordPress up to version 6.0.12. The root cause is insufficient sanitization/escaping of certain plugin settings before output, allowing stored Cross-Site Scripting by high-privilege users even when unfiltered_h...

CVE-2016-10870

CVE-2016-10870 affects the WordPress google-language-translator plugin, with XSS in versions prior to 5.0.06. Root cause: insufficient validation of client-side data in the plugin. Impact: cross-site scripting via the plugin’s interfaces. Mitigation: upgrade to version 5.0.06 or later (as indicat...