plugin
6 known security issues reported for the Qtranslate X WordPress plugin. Most recent disclosed Aug 31, 2021.
Running Qtranslate X on your site? Check whether your installed version is affected.
Scan your site freeThe qTranslate X plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.4.6.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrative capabilities, to inject arbitrary web scripts in pages that wil...
The qTranslate X plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.4.6.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrative capabilities, to inject arbitrary web scripts in pages that wil...
[en] The qtranslate-x plugin before 3.4.4 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=qtranslate-x json_config_files or json_custom_i18n_config parameter.
The qtranslate-x plugin before 3.4.4 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=qtranslate-x json_config_files or json_custom_i18n_config parameter.
Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Upgrade the plugin.
The plugin does not escape some of its settings before outputting them in attributes, allowing high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free