Medium · 4.3 CVE-2022-45072 EUVD-2022-47993GHSA-mj7q-4wg2-4j6x

WordPress WPML Multilingual CMS premium plugin <= 4.5.13 - Cross-Site Request Forgery (CSRF) vulnerability

Published Nov 17, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in WPML Multilingual CMS premium plugin <= 4.5.13 on WordPress.

Vendor	Product	Affected	Fixed
OnTheGoSystems	WPML Multilingual CMS (WordPress plugin)	<= 4.5.13 – ≤ 4.5.13	—