PatchTheCVEloco translate vulnerabilities and fixes
Recent CVEs affecting loco translate, with upgrade or downgrade steps. 2 tracked.
Also searched as: locotranslate.
loco translate has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2022-04-18. Highest priority: CVE-2022-0765 (score 46/100).
- CVE-2022-0765 MEDIUM 5.4 UPGRADE The Loco Translate WordPress plugin before 2.6.1 does not properly remove inline events from elements in the s
- CVE-2021-24721 MEDIUM 6.5 UPGRADE The Loco Translate WordPress plugin before 2.5.4 mishandles data inputs which get saved to a file, which can b
FAQ
How do I fix loco translate vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is loco translate being exploited right now?
None of the tracked loco translate CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which loco translate CVE should I patch first?
CVE-2022-0765 currently ranks highest (46/100): The Loco Translate WordPress plugin before 2.6.1 does not properly remove inline events from elements in the s.