Multilingual CMS

4.7.3 Authenticated (Contributor+) Stored CrossSite Scripting via wpml_language_switcher Shortcode 3.6.0-4.7.3

Authenticated (Contributor+) Remote Code Execution via Twig ServerSide Template Injection vulnerability <= 4.6.12

CrossSite Request Forgery (CSRF) vulnerability <= 4.5.13

CrossSite Request Forgery (CSRF) vulnerability <= 4.5.13

Broken Access Control vulnerability <= 4.5.10