3.5
Faible
CVE-2025-15695 The Translate WordPress with GTranslate WordPress plugin before 3.0.10 does not validate one of its settings before…
Description
The Translate WordPress with GTranslate WordPress plugin before 3.0.10 does not validate one of its settings before the bundled front-end scripts build markup from it, allowing users with a role as high as administrator to store JavaScript that runs in the session of any visitor to the site.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Translate WordPress with GTranslate 3.0 | premières → < 3.0.10 | 3.0.10 |
Autres CVE de Translate WordPress with GTranslate
Les 4 CVE de Translate WordPress with GTranslate →
CVE-2023-4502
The Translate WordPress with GTranslate WordPress plugin before 3.0.4 does not sanitise and escape some of its settings,…
4.8
Moyenne
CVE-2022-0770
The Translate WordPress with GTranslate WordPress plugin before 2.9.9 does not have CSRF check in some files, and…
Non notée
CVE-2021-25103
The Translate WordPress with GTranslate WordPress plugin before 2.9.7 does not sanitise and escape the body parameter in…
Non notée