Onthegosystems vulnerabilities

Products

• Woocommerce Multilingual & Multicurrency 6
• Sitepress-multilingual-cms 3
• Woocommerce Multilingual \& Multicurrency 3

Newest

• onthegosystems wpml multilingual cms, wpml multilingual cms +1 more WPML Multilingual CMS WordPress Plugin < 4.6.1 Reflected XSS via wp-login.php wp_lang CVE-2023-54413 5.1 MediumOctober 22, 2026
• amir helzer woocommerce multilingual & multicurrency WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.5.8 - PHP Object Injection vulnerability CVE-2026-62130 7.2 HighOctober 10, 2026
• amir helzer woocommerce multilingual & multicurrency WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.5.6 - Cross Site Scripting (XSS) vulnerability CVE-2026-66711 7.1 HighAugust 6, 2026
• amir helzer woocommerce multilingual & multicurrency WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.3.8 - Broken Access Control vulnerability CVE-2025-26888 5.3 MediumApril 9, 2025
• onthegosystems language WordPress Language plugin <= 1.2.1 - Broken Access Control vulnerability CVE-2023-38383 5.4 MediumDecember 13, 2024
• onthegosystems qtranslate x cleanup and wpml import WordPress qTranslate X Cleanup and WPML Import plugin <= 3.0.1 - Broken Access Control vulnerability CVE-2023-29431 4.3 MediumDecember 9, 2024
• onthegosystems woocommerce multilingual & multicurrency, woocommerce multilingual \& multicurrency +1 more WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.3.7 - Broken Access Control vulnerability CVE-2024-44006 4.3 MediumNovember 1, 2024
• onthegosystems woocommerce multilingual & multicurrency, woocommerce multilingual \& multicurrency +1 more WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.3.4 - Broken Access Control vulnerability CVE-2024-30466 5.4 MediumJune 9, 2024
• onthegosystems woocommerce multilingual & multicurrency, sitepress-multilingual-cms, woocommerce multilingual \& multicurrency +2 more WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.3.3.1 - SQL Injection vulnerability CVE-2024-32602 7.6 HighApril 18, 2024
• onthegosystems types WordPress Toolset Types plugin <= 3.4.17 - Authenticated Arbitrary File Upload Vulnerability CVE-2023-27440 7.2 HighMarch 26, 2024
• onthegosystems sitepress-multilingual-cms The sitepress-multilingual-cms (WPML) plugin before 4.3.7-b.2 for WordPress has CSRF due to a... CVE-2020-10568 8.8 HighMarch 14, 2020
• onthegosystems sitepress-multilingual-cms The sitepress-multilingual-cms (WPML) plugin 2.9.3 to 3.2.6 for WordPress has XSS via the Accept... CVE-2015-9416 6.1 MediumSeptember 25, 2019