Pricing
Case studies
Login
Start trial
Multilingual CMS
OnTheGoSystems
Developer
N/A
Latest version
N/A
Installations
N/A
Last updated
WordPress Plugin
Active VDP
Report vulnerability
Vulnerabilities
Security Policy
Security Contributors
Vulnerability history
0 present
7 fixed
3 Mitigation rules
Authenticated (Contributor+) Stored Cross-Site Scripting via wpml_language_switcher Shortcode
3.6.0-4.7.3
May 1, 2025
Authenticated (Contributor+) Remote Code Execution via Twig Server-Side Template Injection vulnerability
<= 4.6.12
Aug 21, 2024
Cross-Site Request Forgery (CSRF) vulnerability
<= 4.5.13
Nov 9, 2022
Cross-Site Request Forgery (CSRF) vulnerability
<= 4.5.13
Nov 9, 2022
Broken Access Control vulnerability
<= 4.5.10
Nov 9, 2022
Broken Access Control vulnerability
<= 4.5.10
Nov 9, 2022
Full Path Disclosure
<= 3.1.7.1
Oct 18, 2015