Browse all 4 CVE security advisories affecting OnTheGoSystems Ltd.. AI-powered Chinese analysis, POCs, and references for each vulnerability.
OnTheGoSystems Ltd. develops mobile device management and enterprise mobility solutions for organizations. Historically, their products have been vulnerable to remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from improper input validation and insecure authentication mechanisms. The company has addressed multiple critical vulnerabilities in its software, with four CVEs currently documented. While no major public security incidents have been reported, their history of vulnerabilities highlights ongoing challenges in secure coding practices, particularly in web interfaces and API endpoints that handle sensitive enterprise data.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2022-38974 | WordPress WPML Multilingual CMS premium plugin <= 4.5.10 - Broken Access Control vulnerability — WPML Multilingual CMS (WordPress plugin)CWE-264 | 4.3 | Medium | 2022-11-18 |
| CVE-2022-38461 | WordPress WPML Multilingual CMS premium plugin <= 4.5.10 - Broken Access Control vulnerability — WPML Multilingual CMS (WordPress plugin)CWE-264 | 5.4 | Medium | 2022-11-17 |
| CVE-2022-45071 | WordPress WPML Multilingual CMS premium plugin <= 4.5.13 - Cross-Site Request Forgery (CSRF) vulnerability — WPML Multilingual CMS (WordPress plugin)CWE-352 | 5.4 | Medium | 2022-11-17 |
| CVE-2022-45072 | WordPress WPML Multilingual CMS premium plugin <= 4.5.13 - Cross-Site Request Forgery (CSRF) vulnerability — WPML Multilingual CMS (WordPress plugin)CWE-352 | 4.3 | Medium | 2022-11-17 |
This page lists every published CVE security advisory associated with OnTheGoSystems Ltd.. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.