CVE-2024-38792: WordPress ConveyThis Translate plugin <= 234 - Non-arbitrary Options Update vulnerability

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-11-01 · updated 2026-06-17
Weakness: CWE-862

Description

Missing Authorization vulnerability in ConveyThis Translate Team Language Translate Widget for WordPress – ConveyThis allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Language Translate Widget for WordPress – ConveyThis: from n/a through 234.

Affected products

ConveyThis Language Translate Widget For Wordpress Conveythis: through 234

References

https://patchstack.com/database/vulnerability/conveythis-translate/wordpress-conveythis-translate-plugin-234-non-arbitrary-options-update-vulnerability?_s_id=cve

Get alerted when CVE-2024-38792 or the next vulnerability affects your stack