Vulnerabilities and security researches forwoocommerce-multilingual woocommerce-multilingual

Apr 10, 2025

CVE, Research URL: CVE-2025-26888
Home page URL: Security reports for WooCommerce Multilingual & Multicurrency with WPML
Application: WooCommerce Multilingual & Multicurrency with WPML
Date: Apr 10, 2025
Research Description: Missing Authorization vulnerability in OnTheGoSystems WooCommerce Multilingual & Multicurrency allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Multilingual & Multicurrency: from n/a through 5.3.8.
Affected versions: Min -, max -.
Status: vulnerable

Oct 08, 2024

CVE, Research URL: CVE-2024-8629
Home page URL: Security reports for WooCommerce Multilingual & Multicurrency with WPML
Application: WooCommerce Multilingual & Multicurrency with WPML
Date: Oct 08, 2024
Research Description: The WooCommerce Multilingual & Multicurrency with WPML plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 5.3.7. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
Affected versions: Min -, max -.
Status: vulnerable

Sep 19, 2024

CVE, Research URL: CVE-2024-44006
Home page URL: Security reports for WooCommerce Multilingual & Multicurrency with WPML
Application: WooCommerce Multilingual & Multicurrency with WPML
Date: Nov 01, 2024
Research Description: Missing Authorization vulnerability in OnTheGoSystems WooCommerce Multilingual & Multicurrency multilingual allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Multilingual & Multicurrency: from n/a through 5.3.6.
Affected versions: Min -, max -.
Status: vulnerable

Jun 07, 2024

CVE, Research URL: CVE-2024-30466
Home page URL: Security reports for WooCommerce Multilingual & Multicurrency with WPML
Application: WooCommerce Multilingual & Multicurrency with WPML
Date: Jun 09, 2024
Research Description: Missing Authorization vulnerability in OnTheGoSystems WooCommerce Multilingual & Multicurrency.This issue affects WooCommerce Multilingual & Multicurrency: from n/a through 5.3.4.
Affected versions: Min -, max -.
Status: vulnerable

CVE, Research URL: CVE-2024-32602
Home page URL: Security reports for WooCommerce Multilingual & Multicurrency with WPML
Application: WooCommerce Multilingual & Multicurrency with WPML
Date: Apr 18, 2024
Research Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in OnTheGoSystems WooCommerce Multilingual & Multicurrency.This issue affects WooCommerce Multilingual & Multicurrency: from n/a through 5.3.3.1.
Affected versions: Min -, max -.
Status: vulnerable