Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-10008 EUVD-2025-36900GHSA-v3px-8gvp-39x8

Translate WordPress and go Multilingual – Weglot <= 5.1 - Missing Authorization to Unauthenticated Limited Transient Deletion

Published Oct 30, 2025 · Updated Apr 8, 2026 · Assigned by Wordfence

Description

The Translate WordPress and go Multilingual – Weglot plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'clean_options' function in all versions up to, and including, 5.1. This makes it possible for unauthenticated attackers to delete limited transients that contain cached plugin options.

Affected products

VendorProductAffectedFixed
remyb92 Translate WordPress with Weglot – Multilingual AI Translation ≤ 5.1 —

References