Medium · 5.4 CVE-2022-45071 EUVD-2022-47992GHSA-qvhw-8crc-phrj

WordPress WPML Multilingual CMS premium plugin <= 4.5.13 - Cross-Site Request Forgery (CSRF) vulnerability

Published Nov 17, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in WPML Multilingual CMS premium plugin <= 4.5.13 on WordPress.

Vendor	Product	Affected	Fixed
OnTheGoSystems	WPML Multilingual CMS (WordPress plugin)	<= 4.5.13 – ≤ 4.5.13	—