3.5
Low
CVE-2025-15695 The Translate WordPress with GTranslate WordPress plugin before 3.0.10 does not validate one of its settings before…
Description
The Translate WordPress with GTranslate WordPress plugin before 3.0.10 does not validate one of its settings before the bundled front-end scripts build markup from it, allowing users with a role as high as administrator to store JavaScript that runs in the session of any visitor to the site.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Translate WordPress with GTranslate 3.0 | earliest → < 3.0.10 | 3.0.10 |
Other CVEs of Translate WordPress with GTranslate
The 4 CVEs of Translate WordPress with GTranslate →
CVE-2023-4502
The Translate WordPress with GTranslate WordPress plugin before 3.0.4 does not sanitise and escape some of its settings,…
4.8
Medium
CVE-2022-0770
The Translate WordPress with GTranslate WordPress plugin before 2.9.9 does not have CSRF check in some files, and…
Not rated
CVE-2021-25103
The Translate WordPress with GTranslate WordPress plugin before 2.9.7 does not sanitise and escape the body parameter in…
Not rated