CVE-2024-0632

Summary

CVE-2024-0632 is a Stored Cross-Site Scripting vulnerability affecting the Automatic Translator with Google Translate plugin for WordPress. This issue, present in all versions up to 1.5.4, allows authenticated attackers with administrator-level access to inject malicious scripts into custom font settings. These scripts will execute whenever a user accesses an injected page, posing a significant security risk. This vulnerability is exclusive to multi-site installations and installations where unfiltered_html has been disabled.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.