WordPress CVEs

Description

The GTranslate plugin before 2.8.52 for WordPress has Reflected XSS via a crafted link. This requires use of the hreflang tags feature within a sub-domain or sub-directory paid option.

Affected WordPress components

• Translate WordPress with GTranslate Plugin · gtranslate
  Confirmed match Active
  Versions not specified
  View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

• n/a n/a — Versions not specified
• gtranslate translate_wordpress_with_gtranslate — Before 2.8.52

References

• plugins.trac.wordpress.org https://plugins.trac.wordpress.org/changeset/2245581/gtranslate Patch, Third Party Advisory
• plugins.trac.wordpress.org https://plugins.trac.wordpress.org/changeset/2245591/gtranslate Patch, Third Party Advisory
• wordpress.org https://wordpress.org/plugins/gtranslate/#developers Product, Third Party Advisory
• wpvulndb.com https://wpvulndb.com/vulnerabilities/10181
• nvd.nist.gov Official NVD record