Skip to content
OpenAdvisories

Vendor

OnTheGoSystems

11 known vulnerabilities.

Products

WPML Multilingual CMS (WordPress plugin) 4 WooCommerce Multilingual & Multicurrency 3 qTranslate X Cleanup and WPML Import 1 Types 1 WPML Multilingual CMS 1 Language 1
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 6.1
    CVE-2023-54413

    WPML Multilingual CMS WordPress Plugin < 4.6.1 Reflected XSS via wp-login.php wp_lang

    WPML Multilingual CMS plugin for WordPress before 4.6.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying crafted input in the wp_lang parameter. Attackers can lure users to /wp-login.p…

    OnTheGoSystems WPML Multilingual CMS Web / CMS
  • Medium 5.4
    CVE-2023-38383

    WordPress Language plugin <= 1.2.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in OnTheGoSystems Language allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Language: from n/a through 1.2.1.

    OnTheGoSystems Language
  • Medium 4.3
    CVE-2023-29431

    WordPress qTranslate X Cleanup and WPML Import plugin <= 3.0.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in OntheGoSystems qTranslate X Cleanup and WPML Import allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects qTranslate X Cleanup and WPML Import: from n/a through 3.0.1.

    OnTheGoSystems qTranslate X Cleanup and WPML Import
  • Medium 4.3
    CVE-2024-44006

    WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.3.7 - Broken Access Control vulnerability

    Missing Authorization vulnerability in OnTheGoSystems WooCommerce Multilingual & Multicurrency woocommerce-multilingual.This issue affects WooCommerce Multilingual & Multicurrency: from n/a through 5.3.6.

    OnTheGoSystems WooCommerce Multilingual & Multicurrency Web / CMS
  • Medium 5.4
    CVE-2024-30466

    WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.3.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in OnTheGoSystems WooCommerce Multilingual & Multicurrency.This issue affects WooCommerce Multilingual & Multicurrency: from n/a through 5.3.4.

    OnTheGoSystems WooCommerce Multilingual & Multicurrency Web / CMS
  • Medium 4.3
    CVE-2022-38974

    WordPress WPML Multilingual CMS premium plugin <= 4.5.10 - Broken Access Control vulnerability

    Broken Access Control vulnerability in WPML Multilingual CMS premium plugin <= 4.5.10 on WordPress allows users with subscriber or higher user roles to change the status of the translation jobs.

    OnTheGoSystems WPML Multilingual CMS (WordPress plugin) Web / CMS
  • Medium 5.4
    CVE-2022-38461

    WordPress WPML Multilingual CMS premium plugin <= 4.5.10 - Broken Access Control vulnerability

    Broken Access Control vulnerability in WPML Multilingual CMS premium plugin <= 4.5.10 on WordPress allows users with a subscriber or higher user role to change plugin settings (selected language for legacy widgets, the default behavior for media content).

    OnTheGoSystems WPML Multilingual CMS (WordPress plugin) Web / CMS
  • Medium 5.4
    CVE-2022-45071

    WordPress WPML Multilingual CMS premium plugin <= 4.5.13 - Cross-Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in WPML Multilingual CMS premium plugin <= 4.5.13 on WordPress.

    OnTheGoSystems WPML Multilingual CMS (WordPress plugin) Web / CMS
  • Medium 4.3
    CVE-2022-45072

    WordPress WPML Multilingual CMS premium plugin <= 4.5.13 - Cross-Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in WPML Multilingual CMS premium plugin <= 4.5.13 on WordPress.

    OnTheGoSystems WPML Multilingual CMS (WordPress plugin) Web / CMS