CVE-2025-15695 GTranslate CVE debrief

Who should care

Defenders responsible for WordPress installations with the Translate WordPress with GTranslate WordPress plugin should assess exposure and prioritize remediation. They should verify plugin versions, restrict administrator-level access, and monitor for suspicious activity. Defenders should also review compensating controls for exposed systems while remediation is scheduled and verified, and check relevant monitoring, detection, and logs for exposed assets

Why it matters

CVE-2025-15695 allows administrators to store malicious JavaScript in the Translate WordPress with GTranslate WordPress plugin, potentially leading to unauthorized actions or data exposure. Defenders should prioritize verifying and updating the plugin, restricting administrator access, and monitoring for suspicious activity.

• Administrators may be able to inject malicious JavaScript, potentially leading to unauthorized actions or data exposure.
• Successful exploitation requires administrator-level access, limiting the attack surface.
• Defenders should verify plugin versions and restrict administrator access to minimize potential exposure.
• Remediation involves updating the plugin to version 3.0.10 or later.

Technical summary

The Translate WordPress with GTranslate WordPress plugin before 3.0.10 does not validate one of its settings before the bundled front-end scripts build markup from it, allowing users with a role as high as administrator to store JavaScript that runs in the session of any visitor to the site. This vulnerability has a CVSS score of 3.5 and a CVSS severity of LOW. The vulnerability allows administrators to inject malicious JavaScript, potentially leading to unauthorized actions or data exposure. Defenders should prioritize verifying and updating the plugin to version 3.0.10 or later, and restrict administrator-level access to minimize potential exposure.

Defensive priority

Defenders should prioritize verifying and updating the plugin to version 3.0.10 or later, and restrict administrator-level access to minimize potential exposure.

Recommended defensive actions

• Verify and update the Translate WordPress with GTranslate WordPress plugin to version 3.0.10 or later.
• Restrict administrator-level access to minimize potential exposure.
• Monitor for suspicious activity and implement compensating controls as needed.
• Review compensating controls for exposed systems while remediation is scheduled and verified.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, but additional information on affected versions and remediation steps may be necessary for thorough assessment. The vulnerability has a CVSS score of 3.5 and a CVSS severity of LOW. There is limited information available on the specific versions affected, and defenders should verify plugin versions and restrict administrator access to minimize potential exposure. Official CVE Program record and NVD detail page provide source-provided CVE metadata and vulnerability The

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.