Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:ray_enterprise_translation:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductRay Enterprise Translation (4e880191-38de-59bb-b309-0fcac968cc84)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-14549 vulnerable 2026-09-16 04:33:12.527037 Ray Enterprise Translation <= 1.7.3 - Subscriber+ Language Addition and Deletion
The Ray Enterprise Translation WordPress plugin through 1.7.3 does not perform any capability or nonce checks on one of its AJAX actions, allowing any authenticated user, including Subscribers, to add or delete the site's configured languages.
Published: 2026-08-11T06:00:12.300Z
Updated: 2026-08-12T19:07:12.291Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-14548 vulnerable 2026-09-16 04:33:12.227379 Ray Enterprise Translation <= 1.7.3 - Subscriber+ Arbitrary API Token Update
The Ray Enterprise Translation WordPress plugin through 1.7.3 does not perform any capability or nonce checks on one of its AJAX actions, allowing any authenticated user, including Subscribers, to overwrite the administrator-configured translation API token with an arbitrary value.
Published: 2026-08-11T06:00:12.113Z
Updated: 2026-08-12T19:03:24.410Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.