Description
WordPress Plugin Translate WordPress with GTranslate is prone to an open redirect vulnerability because the application fails to properly verify user-supplied input. Exploiting this issue may allow attackers to redirect users to arbitrary web sites and conduct phishing attacks; other attacks are also possible. WordPress Plugin Translate WordPress with GTranslate version 2.8.10 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 2.8.11 or latest
References
Related Vulnerabilities
WordPress Plugin Frontend File Manager Arbitrary File Upload (3.9)
Rukovoditel Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-11815)
WordPress Plugin Hueman Addons Cross-Site Scripting (2.3.3)
WordPress Plugin CM Footnotes Cross-Site Scripting (1.1.4)
Oracle Database Server CVE-2006-0258 Vulnerability (CVE-2006-0258)