Known vulnerabilities in WPML Multilingual CMS

Vendor: OnTheGoSystems
Software: WPML Multilingual CMS
Software CPE: cpe:2.3:a:amirhelzer:sitepress-multilingual-cms:*:*:*:*:*:*:*:*
Website: https://profiles.wordpress.org/amirhelzer/
Total vulnerabilities: 5
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 7.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting WPML Multilingual CMS WPML Multilingual CMS is affected by 5 known vulnerabilities: 1 medium, 4 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU69682 - Improper Access Control
CVE-2022-38461		 CWE-284 Medium
No
No
 4.5.11 29.11.2022 SB2022112917
#VU69681 - Improper Access Control
CVE-2022-38974		 CWE-284 Low
No
No
 4.5.11 29.11.2022 SB2022112917
#VU69680 - Cross-Site Request Forgery (CSRF)
CVE-2022-45071		 CWE-352 Low
No
No
 4.5.14 29.11.2022 SB2022112918
#VU69678 - Cross-Site Request Forgery (CSRF)
CVE-2022-45072		 CWE-352 Low
No
No
 4.5.14 29.11.2022 SB2022112918
#VU26085 - Cross-Site Request Forgery (CSRF)
CVE-2020-10568		 CWE-352 Low
No
No
 4.3.7-b.2 16.03.2020 SB2020031601