What’s Vulnerable › Vulnerabilities

CVE-2021-25057: Translation Exchange <= 1.0.14 - Authenticated Stored Cross-Site Scripting (XSS)

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-02-21 · updated 2026-06-17
• Weakness: CWE-79

Description

The Translation Exchange WordPress plugin through 1.0.14 was vulnerable to Authenticated Stored Cross-Site Scripting (XSS) within the Project Key text field found in the plugin's settings.

Affected products

• Translation Exchange – Translate Your WordPress Site In Minutes!: through 1.0.14

References

• https://wpscan.com/vulnerability/c0dd3ef1-579d-43a4-801a-660c41495d58
• https://wpscan.com/vulnerability/c0dd3ef1-579d-43a4-801a-660c41495d58

Get alerted when CVE-2021-25057 or the next vulnerability affects your stack