Translate WordPress and Go Multilingual – Weglot Missing Authorization Vulnerability Allowing Unauthenticated Limited Transient Deletion

A vulnerability exists in the Translate WordPress and Go Multilingual – Weglot plugin for WordPress, in all versions through 5.1. The issue arises from a missing capability check in the 'clean_options' function, allowing unauthenticated attackers to delete specific transients that store cached plugin options. This unauthorized data deletion could disrupt the normal functioning of the plugin by removing important configuration or state information.

Impact

Exploitation of this vulnerability allows for unauthorized deletion of transients, which can disrupt the caching mechanism of the plugin and potentially lead to loss of important plugin settings or data.

Remediation

Users can update to version 5.2 or a newer patched version to address this vulnerability.