WordPress Plugin Vulnerabilities

Google Language Translator <= 5.0.05 - XSS

Description

The Translate WordPress – Google Language Translator WordPress plugin was affected by a XSS security vulnerability.

Affects Plugins

Plugin icon
google-language-translator
Fixed in 5.0.06

References

CVE
CVE-2016-10870
URL
https://plugins.trac.wordpress.org/changeset?reponame=&new=1399402%40google-language-translator&old=1293680%40google-language-translator

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.1 (medium)

Miscellaneous

Verified
No
WPVDB ID
210d232b-b8ef-4b72-97bb-5d997b669fcc

Timeline

Publicly Published
2016-04-19 (about 10 years ago)
Added
2019-07-07 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2024-12-17
Title
Philantro – Donations and Donor Management < 5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2026-01-20
Title
Bold Page Builder < 5.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2026-03-17
Title
XStore Core < 5.6.5 - Reflected Cross-Site Scripting
Published
2025-01-03
Title
Cf7Save Extension <= 1 - Reflected Cross-Site Scripting
Published
2025-06-09
Title
Easy Contact Form Lite < 1.1.29 - Contributor+ Stored XSS