low3.5
CVE-2025-15695
The Translate WordPress with GTranslate WordPress plugin before 3.0.10 does not validate one of its settings before the bundled front-end scripts build markup …
Impact
The Translate WordPress with GTranslate WordPress plugin before 3.0.10 does not validate one of its settings before the bundled front-end scripts build markup from it, allowing users with a role as high as administrator to store JavaScript that runs in the session of any visitor to the site.
Affected products
| Product | Affected versions |
|---|---|
| Translate WordPress With GTranslate WordPress Plugin | before 3.0.10 |
Versions were read from the advisory text. No structured product data has been published for this record yet.