Advisories · Technology

OnTheGoSystems Ltd. WPML Multilingual CMS (WordPress plugin).

Every CVE that names OnTheGoSystems Ltd. WPML Multilingual CMS (WordPress plugin) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-38974 CVE record

CVSS 4.3 Medium

WordPress WPML Multilingual CMS premium plugin <= 4.5.10 - Broken Access Control vulnerability
- OnTheGoSystems Ltd. WPML Multilingual CMS (WordPress plugin)
- CWE-264
Not analysed yet 18 Nov 2022
CVE-2022-38461 CVE record

CVSS 5.4 Medium

WordPress WPML Multilingual CMS premium plugin <= 4.5.10 - Broken Access Control vulnerability
- OnTheGoSystems Ltd. WPML Multilingual CMS (WordPress plugin)
- CWE-264
Not analysed yet 17 Nov 2022
CVE-2022-45071 CVE record

CVSS 5.4 Medium

WordPress WPML Multilingual CMS premium plugin <= 4.5.13 - Cross-Site Request Forgery (CSRF) vulnerability
- OnTheGoSystems Ltd. WPML Multilingual CMS (WordPress plugin)
- Cross-site request forgery (CSRF)
Not analysed yet 17 Nov 2022
CVE-2022-45072 CVE record

CVSS 4.3 Medium

WordPress WPML Multilingual CMS premium plugin <= 4.5.13 - Cross-Site Request Forgery (CSRF) vulnerability
- OnTheGoSystems Ltd. WPML Multilingual CMS (WordPress plugin)
- Cross-site request forgery (CSRF)
Not analysed yet 17 Nov 2022