Medium · 5.3 CVE-2024-38792 EUVD-2024-37628GHSA-h5xj-jch9-j68q

WordPress ConveyThis Translate plugin <= 234 - Non-arbitrary Options Update vulnerability

Published Nov 1, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: ConveyThis Translate Team Product: Language Translate Widget for WordPress – ConveyThis Category: Web / CMS

Description

Missing Authorization vulnerability in ConveyThis Translate Team Language Translate Widget for WordPress – ConveyThis allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Language Translate Widget for WordPress – ConveyThis: from n/a through 234.

Affected products

Vendor	Product	Affected	Fixed
ConveyThis Translate Team	Language Translate Widget for WordPress – ConveyThis	≤ 234	—

References

https://patchstack.com/database/vulnerability/conveythis-translate/wordpress-conveythis-translate-plugin-234-non-arbitrary-options-update-vulnerability?_s_id=cve vdb-entry