Skip to content
OpenAdvisories

Vendor

ivijanstefan

2 known vulnerabilities.

Products

Transliterator – Multilingual and Multi-script Text Conversion 1 Cyr to Lat Enhanced 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2026-96575

    Transliterator <= 2.5.8 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Predictable {rstr_keep} Placeholder

    The Transliterator – Multilingual and Multi-script Text Conversion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Predictable {rstr_keep} Placeholder in all versions up to, and including, 2.5.8 due to insufficient in…

    ivijanstefan Transliterator – Multilingual and Multi-script Text Conversion Web / CMS
  • High 8.8
    CVE-2022-4290

    Cyr to Lat <= 3.5 - Authenticated SQL Injection

    The Cyr to Lat plugin for WordPress is vulnerable to authenticated SQL Injection via the 'ctl_sanitize_title' function in versions up to, and including, 3.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the …

    ivijanstefan Cyr to Lat Enhanced Web / CMS