Product · OnTheGoSystems

WPML Multilingual CMS (WordPress plugin)

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

Medium 4.3

CVE-2022-38974

WordPress WPML Multilingual CMS premium plugin <= 4.5.10 - Broken Access Control vulnerability

Broken Access Control vulnerability in WPML Multilingual CMS premium plugin <= 4.5.10 on WordPress allows users with subscriber or higher user roles to change the status of the translation jobs.

OnTheGoSystems WPML Multilingual CMS (WordPress plugin) Web / CMS

Nov 18, 2022
Medium 5.4

CVE-2022-38461

WordPress WPML Multilingual CMS premium plugin <= 4.5.10 - Broken Access Control vulnerability

Broken Access Control vulnerability in WPML Multilingual CMS premium plugin <= 4.5.10 on WordPress allows users with a subscriber or higher user role to change plugin settings (selected language for legacy widgets, the default behavior for media content).

OnTheGoSystems WPML Multilingual CMS (WordPress plugin) Web / CMS

Nov 17, 2022
Medium 5.4

CVE-2022-45071

WordPress WPML Multilingual CMS premium plugin <= 4.5.13 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in WPML Multilingual CMS premium plugin <= 4.5.13 on WordPress.

OnTheGoSystems WPML Multilingual CMS (WordPress plugin) Web / CMS

Nov 17, 2022
Medium 4.3

CVE-2022-45072

WordPress WPML Multilingual CMS premium plugin <= 4.5.13 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in WPML Multilingual CMS premium plugin <= 4.5.13 on WordPress.

OnTheGoSystems WPML Multilingual CMS (WordPress plugin) Web / CMS

Nov 17, 2022