Gtranslate Translate Wordpress With Gtranslate — known CVE vulnerabilities

Every CVE whose affected-product data names Gtranslate Translate Wordpress With Gtranslate, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2022-0770 — CVSS 8.8 (high): The Translate WordPress with GTranslate WordPress plugin before 2.9.9 does not have CSRF check in some files, and write debug data such as…
• CVE-2020-11930 — CVSS 6.1 (medium): The GTranslate plugin before 2.8.52 for WordPress has Reflected XSS via a crafted link. This requires use of the hreflang tags feature…
• CVE-2023-4502 — CVSS 4.8 (medium): The Translate WordPress with GTranslate WordPress plugin before 3.0.4 does not sanitise and escape some of its settings, which could allow…
• CVE-2021-25103 — CVSS 4.7 (medium): The Translate WordPress with GTranslate WordPress plugin before 2.9.7 does not sanitise and escape the body parameter in the…