Skip to content
OpenAdvisories
Medium · 4.3 CVE-2022-38974 EUVD-2022-41521GHSA-qj2c-6348-5hm7

WordPress WPML Multilingual CMS premium plugin <= 4.5.10 - Broken Access Control vulnerability

Published Nov 18, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Broken Access Control vulnerability in WPML Multilingual CMS premium plugin <= 4.5.10 on WordPress allows users with subscriber or higher user roles to change the status of the translation jobs.

Affected products

VendorProductAffectedFixed
OnTheGoSystems WPML Multilingual CMS (WordPress plugin) <= 4.5.10 – ≤ 4.5.10 —

References