OnTheGoSystems

Products

Product	CVEs	Exploited	Latest
WooCommerce Multilingual & Multicurrency	2	–	Jun 9, 2024
Language	1	–	Dec 13, 2024
qTranslate X Cleanup and WPML Import	1	–	Dec 9, 2024
Types	1	–	Mar 26, 2024
WPML Multilingual CMS	1	–	Oct 22, 2026

CVE-2023-54413 Medium 6.1 WPML Multilingual CMS WordPress Plugin < 4.6.1 Reflected XSS via wp-login.php wp_lang 0.3%
CVE-2023-38383 Medium 5.4 WordPress Language plugin <= 1.2.1 - Broken Access Control vulnerability 0.5%
CVE-2023-29431 Medium 4.3 WordPress qTranslate X Cleanup and WPML Import plugin <= 3.0.1 - Broken Access Control vulnerability 0.4%
CVE-2024-30466 Medium 5.4 WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.3.4 - Broken Access Control vulnerability 0.4%
CVE-2024-32602 High 7.6 WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.3.3.1 - SQL Injection vulnerability 0.5%
CVE-2023-27440 High 7.2 WordPress Toolset Types plugin <= 3.4.17 - Authenticated Arbitrary File Upload Vulnerability 0.8%