Description
Broken Access Control vulnerability in WPML Multilingual CMS premium plugin <= 4.5.10 on WordPress allows users with a subscriber or higher user role to change plugin settings (selected language for legacy widgets, the default behavior for media content).
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OnTheGoSystems | WPML Multilingual CMS (WordPress plugin) | <= 4.5.10 – ≤ 4.5.10 | — |