Translate WordPress with GTranslate

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Translate WordPress with GTranslate

Information

Software Type Plugin
Software Slug gtranslate (view on wordpress.org)
Software Status Active
Software Author edo888
Software Website gtranslate.io
Software Downloads 9,968,300
Software Active Installs 500,000
Software Record Last Updated September 30, 2023

6 vulnerabilities

GTranslate <= 3.0.3 - Authenticated (Administrator+) Cross-Site Scripting via Multiple Parameters
4.4
CVE-2023-4502
Aug 25, 2023
Researcher: Pablo Sanchez
Translate WordPress with GTranslate <= 2.9.8 & Translate WordPress – Google Language Translator <= 6.0.13 - Missing Authorization to Sensitive Information Disclosure
8.8
CVE-2022-0770
Mar 7, 2022
Researcher: Diogo Real
Translate WordPress with GTranslate <= 2.9.6 - Reflected Cross-Site Scripting
4.7
CVE-2021-25103
Jan 10, 2022
Researcher: ZhongFu Su
GTranslate Pro and GTranslate Enterprise <= 2.8.64 - Reflected Cross-Site Scripting
5.8
CVE-2021-34630
Jul 23, 2021
Researchers:
GTranslate <= 2.8.51 - Reflected Cross Site Scripting
6.1
CVE-2020-11930
Apr 20, 2020
Researcher: Gaurav
Translate WordPress with GTranslate <= 2.8.10 - Open Redirect
6.1
CVE ID Unknown
Feb 3, 2017
Researchers:
Title CVE ID CVSS Researchers Date
GTranslate <= 3.0.3 - Authenticated (Administrator+) Cross-Site Scripting via Multiple Parameters CVE-2023-4502 4.4 Pablo Sanchez August 25, 2023
Translate WordPress with GTranslate <= 2.9.8 & Translate WordPress – Google Language Translator <= 6.0.13 - Missing Authorization to Sensitive Information Disclosure CVE-2022-0770 8.8 Diogo Real March 7, 2022
Translate WordPress with GTranslate <= 2.9.6 - Reflected Cross-Site Scripting CVE-2021-25103 4.7 ZhongFu Su January 10, 2022
GTranslate Pro and GTranslate Enterprise <= 2.8.64 - Reflected Cross-Site Scripting CVE-2021-34630 5.8 July 23, 2021
GTranslate <= 2.8.51 - Reflected Cross Site Scripting CVE-2020-11930 6.1 Gaurav April 20, 2020
Translate WordPress with GTranslate <= 2.8.10 - Open Redirect 6.1 February 3, 2017

All the threat data shared in this database is powered by Wordfence Intelligence Enterprise.
Interested in integrating this data into your platform or network?
Contact us now to discuss API access to our Wordfence Intelligence Enterprise Data Feeds.

Inquire Now

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation