cleantalk
Vulnerabilities and Security Researches

Translate WordPress with GTranslate, 531e4f0bd44fc7742e764c6c8b32d6bb844afcc2

Published on
Feb 03, 2017
Research Description
Translate WordPress with GTranslate [gtranslate] < 2.8.11 Translate WordPress with GTranslate <= 2.8.10 - Open Redirect The Google Translate Plugin for WordPress is vulnerable to Open Redirect in versions up to, and including, 2.8.10. This is due to the application failing to properly verify user-supplied input from the `gurl` parameter. This makes it possible for unauthenticated attackers to exploit this issue and redirect users to arbitrary web sites and conduct phishing attacks; other attacks are also possible.
Affected versions
max 2.8.11.
Status
vulnerable