CVE

CVE-2021-24910

6.1

CVSS

Description

The Transposh WordPress Translation WordPress plugin before 1.0.8 does not sanitise and escape the a parameter via an AJAX action (available to both unauthenticated and authenticated users when the curl library is installed) before outputting it back in the response, leading to a Reflected Cross-Site Scripting issue

Attack Vector

Privileges Req.

User Interaction

transposh wordpress translation

Updated Oct 24, 2026View on NVD →

S4E scanner

mediumProduct Based Web Vulnerabilities~10 seconds

CVE-2021-24910 Scanner

CVE-2021-24910 scanner - Cross-Site Scripting (XSS) vulnerability in Transposh plugin for WordPress

Used 2.7k times · 3.4k assets checked · url

Scanner page →Run scanner

CVE history: transposh wordpress translation

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →