PT-2025-38770 · WordPress · Language Translate Widget For Wordpress – Conveythis

Mcdruid · CVE-2025-57919 · Published 2025-09-22 · Updated 2025-09-22

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ConveyThis Language Translate Widget for WordPress versions through 264

Description The ConveyThis Language Translate Widget for WordPress is susceptible to deserialization of untrusted data, which allows for object injection. This issue could potentially allow an attacker to compromise the system by manipulating serialized data.

Recommendations Update ConveyThis Language Translate Widget for WordPress to a version later than 264.

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2025-57919

Affected Products

Language Translate Widget For Wordpress – Conveythis

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-57919 · Security Note
• https://twitter.com/CVEnew/status/1970208014323110326 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/conveythis-translate/vulnerability/wordpress-language-translate-widget-for-wordpress-conveythis-plugin-264-php-object-injection-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/wordpress/plugin/conveythis-translate/vulnerability/wordpress-language-translate-widget-for-wordpress-conveythis-plugin-264-php-object-injection-vulnerability?_s_id=cve · Note