Advisories · Technology
WPML Multilingual CMS.
Every CVE that names WPML Multilingual CMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.1 High
WPML Multilingual CMS <= 4.9.7 - Unauthenticated Authentication Bypass in Language-per-Domain SSO via 'wpml_sso_token_domain' Parameter
- WPML Multilingual CMS
- Authentication bypass
- CVSS 6.5 Medium
WPML Multilingual CMS <= 4.9.5 - Incorrect Authorization to Authenticated (Subscriber+) SQL Injection via ‘elementIds’
- WPML Multilingual CMS
- SQL injection
- CVSS 6.5 Medium
WPML Multilingual CMS <= 4.9.5 - Authenticated (Translator+) SQL Injection via 'sorting' Parameter
- WPML Multilingual CMS
- SQL injection