ConveyThis AI Multilingual Translation

ConveyThis AI Multilingual Translation has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2026; all 5 are fixed as of October 2026. Their average CVSS score is 5.9, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high. 2025 was the busiest year with 2 disclosures.

The most common weakness is Missing Authorization, behind 3 of the records (60%). Other recurring categories include Cross-Site Scripting, Deserialization Of Untrusted Data.

Every one of the 5 issues recorded for ConveyThis AI Multilingual Translation has a vendor fix available, so running the current release closes all known holes.

5 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

5.9/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all ConveyThis AI Multilingual Translation vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.2CVE-2023-6811

Language Translate Widget for WordPress – ConveyThis <= 223 - Unauthenticated Stored Cross-Site Scripting via api_key

Read the full analysis

Vulnerability Records

5 records


2026-01-27 00:00	ConveyThis <= 270.4 - Missing Authorization ConveyThis AI Multilingual Translation <= 270.4	`CVE-2025-68021`	5.3 Medium	NumeX	Yes
2025-11-29 00:00	ConveyThis <= 269.2 - Missing Authorization ConveyThis AI Multilingual Translation <= 269.2	`CVE-2025-62152`	5.3 Medium	Nabil Irawan	Yes
2025-09-22 00:00	Language Translate Widget for WordPress – ConveyThis <= 269.1 - Authenticated (Administrator+) PHP Object Injection ConveyThis AI Multilingual Translation <= 269.1	`CVE-2025-57919`	6.6 Medium	Drew Webber (mcdruid)	Yes
2024-07-22 00:00	Language Translate Widget for WordPress – ConveyThis <= 234 - Missing Authorization to Limited Option Update ConveyThis AI Multilingual Translation <= 234	`CVE-2024-38792`	5.3 Medium	Humberto Castelo Branco	Yes
2024-04-10 00:00	Language Translate Widget for WordPress – ConveyThis <= 223 - Unauthenticated Stored Cross-Site Scripting via api_key ConveyThis AI Multilingual Translation <= 223	`CVE-2023-6811`	7.2 High	Krzysztof Zając	Yes

Showing 1–5 of 5 reports