GCVE - cpe:2.3:a:carlos_a_sanz:qtranslate

Approved changes feed: RSS · Atom

cpe:2.3:a:carlos_a_sanz:qtranslate_slug:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Carlos A Sanz (`6ac51bb9-396f-5df6-8f3c-6f052af09f84`)
Product	Qtranslate Slug (`2b3e1ba4-bf33-553b-a22f-a655576c3c13`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-4410`	vulnerable	2026-06-08 05:38:09.366339	Qtranslate Slug <= 1.1.18 - Cross-Site Request Forgery Bypass MEDIUM (4.3) The Qtranslate Slug plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.18. This is due to missing or incorrect nonce validation on the save_postdata() function. This makes it possible for unauthenticated attackers to save post data via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Published: 2023-07-12T03:02:03.286Z Updated: 2026-04-08T17:11:34.657Z Open on db.gcve.eu Reference links https://www.wordfence.com/threat-intel/vulnerabilities/id/9d682596-c32d-4abd-ba39-b57fc45c9ce0?source=cve https://blog.nintechnet.com/25-wordpress-plugins-vulnerable-to-csrf-attacks/ https://blog.nintechnet.com/more-wordpress-plugins-and-themes-vulnerable-to-csrf-attacks/ https://blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-3/ https://blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-2/	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.