Gtranslate

9 CVEs across 3 Gtranslate products. Browse Gtranslate vulnerabilities, severities, and proof-of-concept exploits.

Gtranslate products with known CVEs

ProductCVEs
Translate WordPress With Gtranslate4
Google Language Translator3
Gtranslate2
Gtranslate CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-8492Low2.72026-05-19Modification of Assumed-Immutable Data (MAID) vulnerability in Drupal Translate Drupal with GTranslate allows Resource Location Spoofing. This issue affects T…
CVE-2021-4452High7.12024-10-16The Google Language Translator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via multiple parameters in versions up to, and including, 6…
CVE-2023-4502Medium4.82023-09-25The Translate WordPress with GTranslate WordPress plugin before 3.0.4 does not sanitise and escape some of its settings, which could allow high privilege users…
CVE-2022-0770High8.82022-03-28The Translate WordPress with GTranslate WordPress plugin before 2.9.9 does not have CSRF check in some files, and write debug data such as user's cookies in a…
CVE-2021-25103Medium4.72022-02-07The Translate WordPress with GTranslate WordPress plugin before 2.9.7 does not sanitise and escape the body parameter in the url_addon/gtranslate-email.php fil…
CVE-2021-24594Medium4.82021-11-08The Translate WordPress – Google Language Translator WordPress plugin before 6.0.12 does not sanitise and escape some of its settings before outputting it in v…
CVE-2021-34630Medium5.02021-07-30In the Pro and Enterprise versions of GTranslate < 2.8.65, the gtranslate_request_uri_var function runs at the top of all pages and echoes out the contents of…
CVE-2020-11930Medium6.12020-04-20The GTranslate plugin before 2.8.52 for WordPress has Reflected XSS via a crafted link. This requires use of the hreflang tags feature within a sub-domain or s…
CVE-2016-10870Medium6.12019-08-13The google-language-translator plugin before 5.0.06 for WordPress has XSS.