CVE-2022-38461

Publication date

2022-11-17 21:59:46

Family

Patchstack

State

PUBLISHED

Description

Broken Access Control vulnerability in WPML Multilingual CMS premium plugin <= 4.5.10 on WordPress allows users with a subscriber or higher user role to change plugin settings (selected language for legacy widgets, the default behavior for media content).