CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Missing Authorization vulnerability in ConveyThis Translate Team Language Translate Widget for WordPress – ConveyThis allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Language Translate Widget for WordPress – ConveyThis: from n/a through 234.
Explanation of Vulnerability in Simple Terms
The ConveyThis Language Translate Widget for WordPress plugin through version 234 lacks proper authorization checks, allowing unauthenticated attackers to read sensitive information. An attacker can access data without needing to log in or interact with a site administrator. Site owners should update the plugin immediately to prevent unauthorized data disclosure.
What an attacker can do
Read sensitive site data without logging in.
Potential impact on your site
Visitor data or site configuration may be exposed to anyone on the internet.
Conditions required to exploit
Network access to the WordPress site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
