CVE-2024-8514

CVE-2024-8514 : The Prisna GWT – Google Website Translator plugin for WordPress is vulnerable to authenticated PHP Object Injection via deserialization of input in the prisna_import parameter for versions up to and including 1.4.11. An attacker with Administrator-level access could inject a PHP o...

CVE-2024-12679

The Prisna GWT WordPress plugin (versions prior to 1.4.14 ) is vulnerable to a Stored Cross-Site Scripting (XSS) attack. The root cause is the failure to properly sanitise and escape certain settings within the plugin. This vulnerability allows high-privilege users, such as administrators , to ex...

CVE-2024-12680

The Prisna GWT WordPress plugin versions prior to 1.4.14 is vulnerable to a Stored Cross-Site Scripting (XSS) attack. The root cause is the failure to properly sanitise and escape certain settings, which allows high-privilege users, such as administrators, to execute malicious scripts. This vulne...