Timwhitlock vulnerabilities
We track 1 vulnerability in Timwhitlock products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 16, 2026.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Timwhitlock vulnerabilities
- 8.8 High severity
Loco Translate: Cross-Site Request Forgery
The Loco Translate plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.8.5. This is due to missing or incorrect nonce validation on the execTemplate function. This makes it possible for unauthenticated attac