WPML Multilingual CMS

Explore WPML Multilingual CMS vulnerabilities across all versions. Currently tracking 14 known vulnerabilities, including severity, impact, and patch status.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all WPML Multilingual CMS vulnerabilities before they are exploited.

Vulnerability Records

14 records


2025-05-01 17:11	WPML Multilingual CMS 3.6.0 - 4.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpml_language_switcher Shortcode WPML Multilingual CMS 3.6.0 – 4.7.3	`CVE-2025-3488`	6.4 Medium	stealthcopter	Yes
2024-08-21 08:00	WPML Multilingual CMS <= 4.6.12 - Authenticated (Contributor+) Remote Code Execution via Twig Server-Side Template Injection WPML Multilingual CMS <= 4.6.12	`CVE-2024-6386`	9.9 Critical	stealthcopter	Yes
2023-04-16 00:00	WPML <= 4.6.0 - Reflected Cross-Site Scripting via wp_lang WPML Multilingual CMS <= 4.6.0	`N/A`	6.1 Medium	Deepak kumar	Yes
2022-11-09 00:00	WPML <= 4.5.10 - Missing Authorization to Translation Job Status Change WPML Multilingual CMS <= 4.5.10	`CVE-2022-38974`	4.3 Medium	Dave Jong	Yes
2022-11-09 00:00	WPML <= 4.5.13 - Cross-Site Request Forgery WPML Multilingual CMS <= 4.5.13	`CVE-2022-45071`	4.3 Medium	Dave Jong	Yes
2022-11-09 00:00	WPML <= 4.5.13 - Cross-Site Request Forgery WPML Multilingual CMS <= 4.5.13	`CVE-2022-45072`	4.3 Medium	Dave Jong	Yes
2022-11-09 00:00	WPML <= 4.5.10 - Missing Authorization to Settings Change WPML Multilingual CMS <= 4.5.10	`CVE-2022-38461`	4.3 Medium	Dave Jong	Yes
2022-09-26 00:00	WPML <= 4.5.10 - Unprotected AJAX Actions WPML Multilingual CMS <= 4.5.10	`N/A`	5.4 Medium	Anonymous	Yes
2020-03-09 00:00	WPML < 4.3.7 - Cross-Site Request Forgery Bypass WPML Multilingual CMS < 4.3.7	`CVE-2020-10568`	8.8 High	Gerard Arall	Yes
2018-10-08 00:00	WPML <= 3.6.3 - Unauthenticated Stored Cross-Site Scripting WPML Multilingual CMS <= 3.6.3	`CVE-2018-18069`	7.2 High	Anonymous	Yes

Showing 1–10 of 14 reports