CVE-2024-6869

Name of the Vulnerable Software and Affected Versions Falang multilanguage for WordPress plugin versions up to, and including, 1.3.52

Description The issue allows authenticated attackers with Subscriber-level access and above to update and delete translations and expose the administrator email address due to a missing capability check on several functions.

Recommendations For versions up to, and including, 1.3.52, update to a version that includes a fix for the missing capability check issue to prevent unauthorized modification of data.