CVE-2015-2792

Name of the Vulnerable Software and Affected Versions WPML plugin versions prior to 3.1.9

Description The issue allows remote attackers to bypass nonce checks and perform arbitrary actions. This is achieved by sending a request that contains an action POST parameter, an action GET parameter, and a valid nonce for the action GET parameter.

Recommendations For WPML plugin versions prior to 3.1.9, update to version 3.1.9 or later to resolve the issue.