Skip to content
OpenAdvisories

Vendor

ConveyThis

4 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.2

    WordPress ConveyThis plugin <= 269.1 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in ConveyThis ConveyThis conveythis-translate allows Object Injection.This issue affects ConveyThis: from n/a through <= 269.1.

  • High 7.2

    Language Translate Widget for WordPress – ConveyThis <= 223 - Unauthenticated Stored Cross-Site Scripting via api_key

    The Language Translate Widget for WordPress – ConveyThis plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'api_key’ parameter in all versions up to, and including, 223 due to insufficient input sanitization and output escaping. This m…