Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2022-38461

WordPress WPML Multilingual CMS premium plugin <= 4.5.10 - Broken Access Control vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Patchstack

Description

Broken Access Control vulnerability in WPML Multilingual CMS premium plugin <= 4.5.10 on WordPress allows users with a subscriber or higher user role to change plugin settings (selected language for legacy widgets, the default behavior for media content).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OnTheGoSystems Ltd. WPML Multilingual CMS (WordPress plugin)

  • <= 4.5.10 to ≤ 4.5.10affected

References