{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/automatic-translation--1.0.4/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":10,"id":"CVE-2024-50493"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Automatic Translation (\u003c= 1.0.4)"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":[],"content_html":"\u003cp\u003eThe Automatic Translation WordPress plugin is vulnerable to an unauthenticated arbitrary file upload flaw due to the lack of file type validation in versions 1.0.4 and earlier. The vulnerability resides in the /wp-json/automatic-translator/v1/saveDoc API endpoint. An attacker can use this flaw to upload arbitrary files, such as PHP web shells, to the web server, leading to potential remote code execution. A functional exploit proof-of-concept (PoC) has been publicly released.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows an unauthenticated, remote attacker to execute arbitrary code on the target web server with the privileges of the web application service. This can lead to full server compromise, data exfiltration, and lateral movement within the hosting environment.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIdentify and audit all WordPress installations for the presence of the 'Automatic Translation' plugin.\u003c/li\u003e\n\u003cli\u003eUpdate the 'Automatic Translation' plugin to a version beyond 1.0.4 immediately. If an update is unavailable, disable or remove the plugin until a patch is applied.\u003c/li\u003e\n\u003cli\u003eImplement web application firewall (WAF) rules to block POST requests directed at /wp-json/automatic-translator/v1/saveDoc.\u003c/li\u003e\n\u003cli\u003eMonitor server file systems for the creation of new or unknown files within the plugin directory or web root, particularly PHP files.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-28T19:23:49Z","date_published":"2026-10-28T19:23:49Z","id":"https://feed.craftedsignal.io/briefs/2026-10-automatic-translation-rce/","summary":"An unauthenticated arbitrary file upload vulnerability in the Automatic Translation WordPress plugin (versions 1.0.4 and below) allows remote attackers to upload arbitrary files via the /wp-json/automatic-translator/v1/saveDoc endpoint to achieve remote code execution.","title":"Automatic Translation WordPress Plugin: Unauthenticated Remote Code Execution (CVE-2024-50493)","url":"https://feed.craftedsignal.io/briefs/2026-10-automatic-translation-rce/"}],"language":"en","title":"CraftedSignal Threat Feed - Automatic Translation (\u003c= 1.0.4)","version":"https://jsonfeed.org/version/1.1"}