WPGlobus Translate Options Plugin Vulnerable to Cross-Site Request Forgery

CVE-2024-9434

What is CVE-2024-9434?

The WPGlobus Translate Options plugin for WordPress is susceptible to Cross-Site Request Forgery (CSRF) vulnerabilities, affecting all versions up to and including 2.2.0. The issue arises from improper nonce validation on the on__translate_options_page() function. This weakness allows attackers, without authentication, to execute malicious scripts and manipulate plugin settings if they can convince an administrator to perform an action through a deceptive link. Consequently, it poses a significant risk to website integrity and security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References