Onthegosystems
5 CVEs across 6 Onthegosystems products. Browse Onthegosystems vulnerabilities, severities, and proof-of-concept exploits.
Onthegosystems products with known CVEs
Onthegosystems CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2023-38383 | Medium | 5.4 | 2024-12-13 | Missing Authorization vulnerability in OnTheGoSystems Language allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Langu… |
CVE-2023-29431 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in OntheGoSystems qTranslate X Cleanup and WPML Import allows Exploiting Incorrectly Configured Access Control Security Lev… |
CVE-2024-44006 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Amir Helzer WooCommerce Multilingual & Multicurrency woocommerce-multilingual.This issue affects WooCommerce Multilingua… |
CVE-2024-30466 | Medium | 5.4 | 2024-06-09 | Missing Authorization vulnerability in OnTheGoSystems WooCommerce Multilingual & Multicurrency.This issue affects WooCommerce Multilingual & Multicurrency: fro… |
CVE-2024-32602 | High | 7.6 | 2024-04-18 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in OnTheGoSystems WooCommerce Multilingual & Multicurrency.T… |
CVE-2023-27440 | High | 7.2 | 2024-03-26 | Unrestricted Upload of File with Dangerous Type vulnerability in OnTheGoSystems Types.This issue affects Types: from n/a through 3.4.17. |
CVE-2020-10568 | High | 8.8 | 2020-03-14 | The sitepress-multilingual-cms (WPML) plugin before 4.3.7-b.2 for WordPress has CSRF due to a loose comparison. This leads to remote code execution in includes… |
CVE-2015-9416 | Medium | 6.1 | 2019-09-26 | The sitepress-multilingual-cms (WPML) plugin 2.9.3 to 3.2.6 for WordPress has XSS via the Accept-Language HTTP header. |