Wpml vulnerabilities

Products

• Wpml 11
• Multilingual Cms 3

Newest

• onthegosystems wpml multilingual cms, wpml multilingual cms +1 more WPML Multilingual CMS WordPress Plugin < 4.6.1 Reflected XSS via wp-login.php wp_lang CVE-2023-54413 5.1 MediumOctober 22, 2026
• wpml multilingual cms WPML Multilingual CMS <= 4.9.5 - Incorrect Authorization to Authenticated (Subscriber+) SQL Injection via ‘elementIds’ CVE-2026-17509 6.5 MediumSeptember 8, 2026
• wpml multilingual cms WPML Multilingual CMS <= 4.9.5 - Authenticated (Translator+) SQL Injection via 'sorting' Parameter CVE-2026-12248 6.5 MediumAugust 15, 2026
• wpml WPML Multilingual CMS 3.6.0 - 4.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpml_language_switcher Shortcode CVE-2025-3488 6.4 MediumMay 2, 2025
• wpml WPML Multilingual CMS <= 4.6.12 - Authenticated (Contributor+) Remote Code Execution via Twig Server-Side Template Injection CVE-2024-6386 Public exploit EPSS 25.5% 9.9 CriticalAugust 21, 2024
• wpml, onthegosystems ltd. wpml multilingual cms (wordpress plugin) +1 more WordPress WPML Multilingual CMS premium plugin <= 4.5.10 - Broken Access Control vulnerability CVE-2022-38974 4.3 MediumNovember 18, 2022
• wpml, onthegosystems ltd. wpml multilingual cms (wordpress plugin) +1 more WordPress WPML Multilingual CMS premium plugin <= 4.5.10 - Broken Access Control vulnerability CVE-2022-38461 5.4 MediumNovember 17, 2022
• wpml, onthegosystems ltd. wpml multilingual cms (wordpress plugin) +1 more WordPress WPML Multilingual CMS premium plugin <= 4.5.13 - Cross-Site Request Forgery (CSRF) vulnerability CVE-2022-45071 5.4 MediumNovember 17, 2022
• wpml, onthegosystems ltd. wpml multilingual cms (wordpress plugin) +1 more WordPress WPML Multilingual CMS premium plugin <= 4.5.13 - Cross-Site Request Forgery (CSRF) vulnerability CVE-2022-45072 4.3 MediumNovember 17, 2022
• wpml process_forms in the WPML (aka sitepress-multilingual-cms) plugin through 3.6.3 for WordPress has... CVE-2018-18069 EPSS 13.2% 6.1 MediumOctober 8, 2018
• wpml The WPML plugin before 3.1.9 for WordPress does not properly handle multiple actions in a request... CVE-2015-2792 7.5 HighMarch 30, 2015
• wpml The "menu sync" function in the WPML plugin before 3.1.9 for WordPress allows remote attackers to... CVE-2015-2791 Public exploit EPSS 13.3% 6.4 MediumMarch 30, 2015
• wpml Cross-site scripting (XSS) vulnerability in the WPML plugin before 3.1.9 for WordPress allows... CVE-2015-2315 Public exploit 4.3 MediumMarch 17, 2015
• wpml SQL injection vulnerability in the WPML plugin before 3.1.9 for WordPress allows remote attackers... CVE-2015-2314 Public exploit 7.5 HighMarch 17, 2015