Timwhitlock vulnerabilities

Products

• Loco Translate 9

Newest

• timwhitlock loco translate Loco Translate < 2.8.9 - Translator+ Stored XSS via Bundle Configuration CVE-2026-94239 6.8 MediumOctober 3, 2026
• timwhitlock loco translate Loco Translate < 2.8.9 - Translator+ Limited File Read via 'path' Parameter CVE-2026-94238 6.8 MediumOctober 3, 2026
• timwhitlock loco translate Loco Translate <= 2.8.7 - Authenticated (Translator+) Stored Cross-Site Scripting via PO File Extracted Comments CVE-2026-15066 6.4 MediumAugust 16, 2026
• timwhitlock loco translate Loco Translate <= 2.8.5 - Cross-Site Request Forgery to Remote Code Execution via 'template' Parameter CVE-2026-15005 8.8 HighJuly 16, 2026
• timwhitlock loco translate Loco Translate <= 2.8.2 - Authenticated (Translator+) Path Traversal to Limited File Read via 'ref' Parameter CVE-2026-1921 4.9 MediumMay 5, 2026
• timwhitlock loco translate Loco Translate <= 2.8.2 - Reflected Cross-Site Scripting via 'update_href' Parameter CVE-2026-4146 6.1 MediumMarch 31, 2026
• tim w loco translate WordPress Loco Translate plugin <= 2.6.9 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-37236 4.3 MediumJanuary 2, 2025
• loco translate project translate, timwhitlock loco translate +1 more Loco Translate < 2.6.1 - Authenticated Stored Cross-Site Scripting CVE-2022-0765 5.4 MediumApril 18, 2022
• loco translate project translate, timwhitlock loco translate +1 more Loco Translate < 2.5.4 - Authenticated PHP Code Injection CVE-2021-24721 6.5 MediumNovember 8, 2021