Falang Multilanguage For Wordpress
Approved changes feed: RSS · Atom
cpe:2.3:a:sbouey:falang_multilanguage_for_wordpress:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sbouey (a0adff35-a43e-5131-90f5-20ea0e0d96ad) |
|---|---|
| Product | Falang Multilanguage For Wordpress (bdc82c48-752c-5ce9-925f-2d560f885fc6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-6869 |
vulnerable | 2026-06-08 06:58:20.625920 |
Falang multilanguage for WordPress <= 1.3.52 - Missing Authorization to Translation Update and Information Exposure
MEDIUM (5.4)
The Falang multilanguage for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all versions up to, and including, 1.3.52. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update and delete translations and expose the administrator email address.
Published: 2024-08-08T04:11:38.071Z
Updated: 2026-04-08T17:24:01.069Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4417 |
vulnerable | 2026-06-08 06:50:17.724650 |
Falang multilanguage for WordPress <= 1.3.49 - Authenticated (Administrator+) Stored Cross-Site Scripting
MEDIUM (4.4)
The Falang multilanguage for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.3.49 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
Published: 2024-05-10T21:32:42.365Z
Updated: 2026-04-08T17:17:22.304Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.