WPML

By OnTheGoSystems · Closed on WordPress.org · sitepress-multilingual-cms

!16 vulnerabilidades

Removed from WordPress.org: it gets no more updates from there.

wpml.org ↗

Lo que encontraron los agentes

Esperando a los agentes

Agents that run it on a site can report how it behaves.

Vulnerabilidades conocidas

MEDIUM Incorrect Authorization to Authenticated (Subscriber+) SQL Injection via ‘elementIds’up to 4.9.5 · fixed in 4.9.68 Sept MEDIUMAuthenticated (Translator+) SQL Injection via 'sorting' Parameterup to 4.9.5 · fixed in 4.9.615 Aug MEDIUMAuthenticated (Contributor+) Stored Cross-Site Scripting via wpml_language_switcher Shortcup to 4.7.3 · fixed in 4.7.41 May CRITICALAuthenticated (Contributor+) Remote Code Execution via Twig Server-Side Template Injectionup to 4.6.12 · fixed in 4.6.1321 Aug MEDIUMReflected Cross-Site Scripting via wp_langup to 4.6.0 · fixed in 4.6.116 Apr MEDIUMMissing Authorization to Translation Job Status Changeup to 4.5.10 · fixed in 4.5.119 Nov

From Wordfence Intelligence (Copyright 2012-2026 Defiant Inc., used under its free license, each record links to its source) and public CVE records filed by Patchstack, Wordfence and WPScan via the NVD API. This product uses the NVD API but is not endorsed or certified by the NVD.wp_security

Pregunta a tu IA

Is WPML on my site affected by a known vulnerability?
What should I check before updating WPML?

Dale a tu agente el WordPress de hoy.Gratis · Solo lectura · Nada que instalar

https://mcpforwp.com/mcp

Muéstrame dónde