Onthegosystems

9 CVEs in 7 Onthegosystems products, including Woocommerce Multilingual \& Multicurrency, Sitepress-Multilingual-Cms, Woocommerce Multilingual & Multicurr…

Onthegosystems products with known CVEs

ProductCVEs
Woocommerce Multilingual \& Multicurrency3
Sitepress-Multilingual-Cms2
Woocommerce Multilingual & Multicurrency2
Language1
Qtranslate X Cleanup And Wpml Import1
Types1
Wpml Multilingual Cms1
Onthegosystems CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2023-54413Medium6.12026-10-22WPML Multilingual CMS plugin for WordPress before 4.6.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject…
CVE-2023-38383Medium5.42024-12-13Missing Authorization vulnerability in OnTheGoSystems Language allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Langu…
CVE-2023-29431Medium4.32024-12-09Missing Authorization vulnerability in OntheGoSystems qTranslate X Cleanup and WPML Import allows Exploiting Incorrectly Configured Access Control Security Lev…
CVE-2024-44006Medium4.32024-11-01Missing Authorization vulnerability in Amir Helzer WooCommerce Multilingual & Multicurrency woocommerce-multilingual.This issue affects WooCommerce Multilingua…
CVE-2024-30466Medium5.42024-06-09Missing Authorization vulnerability in OnTheGoSystems WooCommerce Multilingual & Multicurrency.This issue affects WooCommerce Multilingual & Multicurrency: fro…
CVE-2024-32602High7.62024-04-18Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in OnTheGoSystems WooCommerce Multilingual & Multicurrency.T…
CVE-2023-27440High7.22024-03-26Unrestricted Upload of File with Dangerous Type vulnerability in OnTheGoSystems Types.This issue affects Types: from n/a through 3.4.17.
CVE-2020-10568High8.82020-03-14The sitepress-multilingual-cms (WPML) plugin before 4.3.7-b.2 for WordPress has CSRF due to a loose comparison. This leads to remote code execution in includes…
CVE-2015-9416Medium6.12019-09-26The sitepress-multilingual-cms (WPML) plugin 2.9.3 to 3.2.6 for WordPress has XSS via the Accept-Language HTTP header.