PatchTheCVEloco translate project vulnerabilities
Recent CVEs affecting loco translate project products. 2 tracked.
loco translate project has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2022-04-18. Highest priority: CVE-2022-0765 (score 46/100).
- CVE-2022-0765 MEDIUM 5.4 UPGRADE The Loco Translate WordPress plugin before 2.6.1 does not properly remove inline events from elements in the s
- CVE-2021-24721 MEDIUM 6.5 UPGRADE The Loco Translate WordPress plugin before 2.5.4 mishandles data inputs which get saved to a file, which can b
FAQ
How do I fix loco translate project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is loco translate project being exploited right now?
None of the tracked loco translate project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which loco translate project CVE should I patch first?
CVE-2022-0765 currently ranks highest (46/100): The Loco Translate WordPress plugin before 2.6.1 does not properly remove inline events from elements in the s.