Google Language Translator - Version 6.0.10

Version Description

  • Possible Cross-site scripting (XSS) vulnerability fixed User with Author role can possibly execute javascript code via glt shortcode Kudos to pluginvulnerabilities.com for reporting
  • Possible Cross-site scripting (XSS) vulnerability fixed, only possible for sub-domain, sub-directory paid options: An attacker can generate a malicious link and if followed by a victim with an old browser without proper URL encoding support (<
Download this release

Release Info

Developer edo888
Plugin Icon wp plugin Google Language Translator
Version 6.0.10
Comparing to
See all releases

Code changes from version 6.0.9 to 6.0.10

Files changed (2) hide show
  1. google-language-translator.php +12 -12
  2. readme.txt +9 -1
google-language-translator.php CHANGED
@@ -2,7 +2,7 @@
2
  /*
3
  Plugin Name: Google Language Translator
4
  Plugin URI: https://gtranslate.io/?xyz=3167
5
- Version: 6.0.9
6
  Description: The MOST SIMPLE Google Translator plugin. This plugin adds Google Translator to your website by using a single shortcode, [google-translator]. Settings include: layout style, hide/show specific languages, hide/show Google toolbar, and hide/show Google branding. Add the shortcode to pages, posts, and widgets.
7
  Author: Translate AI Multilingual Solutions
8
  Author URI: https://gtranslate.io
@@ -295,7 +295,7 @@ class google_language_translator {
295
  "image" => 'no',
296
  "text" => 'yes',
297
  "image_size" => '24',
298
- "label" => 'Espa&ntilde;ol'
299
  ), $atts));
300
 
301
  $glt_url_structure = get_option('googlelanguagetranslator_url_structure');
@@ -337,7 +337,7 @@ class google_language_translator {
337
  }
338
  }
339
 
340
- return "<a href='".$href."' class='nturl notranslate ".$language_code." ".$language_name_flag." single-language flag' title='".$language."'>".($image=='yes' ? "<span class='flag size".$image_size."'></span>" : '') .($text=='yes' ? $label : '')."</a>";
341
  }
342
 
343
  public function footer_script() {
@@ -411,7 +411,7 @@ class google_language_translator {
411
  }
412
  }
413
 
414
- $str .= '<li id="'.$language_name.'"><a href="'.$href.'" title="'.$language_name.'" class="nturl notranslate '.$language_code.' flag '.$language_name_flag.'"></a></li>';
415
  } //empty
416
  }//foreach
417
  } else {
@@ -450,7 +450,7 @@ class google_language_translator {
450
  }
451
  }
452
 
453
- $str.='<li id="'.$language_name.'"><a href="'.$href.'" title="'.$language_name.'" class="nturl notranslate '.$language_code.' flag '.$language_name_flag.'"></a></li>';
454
  } //foreach
455
  else:
456
  foreach ($new_languages_array_codes as $value) {
@@ -487,7 +487,7 @@ class google_language_translator {
487
  }
488
  }
489
 
490
- $str.='<li id="'.$language_name.'"><a href="'.$href.'" title="'.$language_name.'" class="nturl notranslate '.$language_code.' flag '.$language_name_flag.'"></a></li>';
491
  }//foreach
492
  endif;
493
  }//endif
@@ -583,7 +583,7 @@ class google_language_translator {
583
  }
584
  }
585
 
586
- $str.="<li id='".$language_name."'><a href='".$href."' title='".$language_name."' class='nturl notranslate ".$language_code." flag ".$language_name_flag."'></a></li>";
587
  } //endif
588
  }//foreach
589
  else:
@@ -622,7 +622,7 @@ class google_language_translator {
622
  }
623
  }
624
 
625
- $str.='<li id="'.$language_name.'"><a href="'.$href.'" title="'.$language_name.'" class="nturl notranslate '.$language_code.' flag '.$language_name_flag.'"></a></li>';
626
  } //foreach
627
  else:
628
  foreach ($new_languages_array_codes as $value) {
@@ -659,7 +659,7 @@ class google_language_translator {
659
  }
660
  }
661
 
662
- $str.='<li id="'.$language_name.'"><a href="'.$href.'" title="'.$language_name.'" class="nturl notranslate '.$language_code.' flag '.$language_name_flag.'"></a></li>';
663
  }//foreach
664
  endif;
665
  endif;
@@ -762,7 +762,7 @@ class google_language_translator {
762
  }
763
  }
764
 
765
- $str.="<li id='".$language_name."'><a href='".$href."' title='".$language_name."' class='nturl notranslate ".$language_code." flag ".$language_name_flag."'></a></li>";
766
  } //endif
767
  }//foreach
768
  else:
@@ -801,7 +801,7 @@ class google_language_translator {
801
  }
802
  }
803
 
804
- $str.='<li id="'.$language_name.'"><a href="'.$href.'" title="'.$language_name.'" class="nturl notranslate '.$language_code.' flag '.$language_name_flag.'"></a></li>';
805
  } //foreach
806
  else:
807
  foreach ($new_languages_array_codes as $value) {
@@ -838,7 +838,7 @@ class google_language_translator {
838
  }
839
  }
840
 
841
- $str.='<li id="'.$language_name.'"><a href="'.$href.'" title="'.$language_name.'" class="nturl notranslate '.$language_code.' flag '.$language_name_flag.'"></a></li>';
842
  }//foreach
843
  endif;
844
  endif;
2
  /*
3
  Plugin Name: Google Language Translator
4
  Plugin URI: https://gtranslate.io/?xyz=3167
5
+ Version: 6.0.10
6
  Description: The MOST SIMPLE Google Translator plugin. This plugin adds Google Translator to your website by using a single shortcode, [google-translator]. Settings include: layout style, hide/show specific languages, hide/show Google toolbar, and hide/show Google branding. Add the shortcode to pages, posts, and widgets.
7
  Author: Translate AI Multilingual Solutions
8
  Author URI: https://gtranslate.io
295
  "image" => 'no',
296
  "text" => 'yes',
297
  "image_size" => '24',
298
+ "label" => html_entity_decode('Espa&ntilde;ol')
299
  ), $atts));
300
 
301
  $glt_url_structure = get_option('googlelanguagetranslator_url_structure');
337
  }
338
  }
339
 
340
+ return "<a href='".esc_url($href)."' class='nturl notranslate ".esc_attr($language_code)." ".esc_attr($language_name_flag)." single-language flag' title='".esc_attr($language)."'>".($image=='yes' ? "<span class='flag size".esc_attr($image_size)."'></span>" : '') .($text=='yes' ? htmlspecialchars($label) : '')."</a>";
341
  }
342
 
343
  public function footer_script() {
411
  }
412
  }
413
 
414
+ $str .= '<li id="'.$language_name.'"><a href="'.esc_url($href).'" title="'.$language_name.'" class="nturl notranslate '.$language_code.' flag '.$language_name_flag.'"></a></li>';
415
  } //empty
416
  }//foreach
417
  } else {
450
  }
451
  }
452
 
453
+ $str.='<li id="'.$language_name.'"><a href="'.esc_url($href).'" title="'.$language_name.'" class="nturl notranslate '.$language_code.' flag '.$language_name_flag.'"></a></li>';
454
  } //foreach
455
  else:
456
  foreach ($new_languages_array_codes as $value) {
487
  }
488
  }
489
 
490
+ $str.='<li id="'.$language_name.'"><a href="'.esc_url($href).'" title="'.$language_name.'" class="nturl notranslate '.$language_code.' flag '.$language_name_flag.'"></a></li>';
491
  }//foreach
492
  endif;
493
  }//endif
583
  }
584
  }
585
 
586
+ $str.="<li id='".$language_name."'><a href='".esc_url($href)."' title='".$language_name."' class='nturl notranslate ".$language_code." flag ".$language_name_flag."'></a></li>";
587
  } //endif
588
  }//foreach
589
  else:
622
  }
623
  }
624
 
625
+ $str.='<li id="'.$language_name.'"><a href="'.esc_url($href).'" title="'.$language_name.'" class="nturl notranslate '.$language_code.' flag '.$language_name_flag.'"></a></li>';
626
  } //foreach
627
  else:
628
  foreach ($new_languages_array_codes as $value) {
659
  }
660
  }
661
 
662
+ $str.='<li id="'.$language_name.'"><a href="'.esc_url($href).'" title="'.$language_name.'" class="nturl notranslate '.$language_code.' flag '.$language_name_flag.'"></a></li>';
663
  }//foreach
664
  endif;
665
  endif;
762
  }
763
  }
764
 
765
+ $str.="<li id='".$language_name."'><a href='".esc_url($href)."' title='".$language_name."' class='nturl notranslate ".$language_code." flag ".$language_name_flag."'></a></li>";
766
  } //endif
767
  }//foreach
768
  else:
801
  }
802
  }
803
 
804
+ $str.='<li id="'.$language_name.'"><a href="'.esc_url($href).'" title="'.$language_name.'" class="nturl notranslate '.$language_code.' flag '.$language_name_flag.'"></a></li>';
805
  } //foreach
806
  else:
807
  foreach ($new_languages_array_codes as $value) {
838
  }
839
  }
840
 
841
+ $str.='<li id="'.$language_name.'"><a href="'.esc_url($href).'" title="'.$language_name.'" class="nturl notranslate '.$language_code.' flag '.$language_name_flag.'"></a></li>';
842
  }//foreach
843
  endif;
844
  endif;
readme.txt CHANGED
@@ -6,7 +6,7 @@ Author URI: https://gtranslate.io/?xyz=3167
6
  Tags: translate wordpress, translate, translator, translation, language, multi language
7
  Requires at least: 2.9
8
  Tested up to: 5.7
9
- Stable tag: 6.0.9
10
 
11
  Translate WordPress with Google Language Translator multilanguage plugin which allows to insert Google Translate widget anywhere on your website.
12
 
@@ -155,6 +155,14 @@ If you want us to translate your website professionally or provide you a proofre
155
  Yes! Add the "notranslate" class to the HTML element containing your text. For example, the following text will be excluded from translation: <span class="notranslate">Hello World!</span>
156
 
157
  == Changelog ==
 
 
 
 
 
 
 
 
158
  = 6.0.9 =
159
  * New server added into our Translation Delivery Network
160
  * Tested with new WordPress 5.7 version
6
  Tags: translate wordpress, translate, translator, translation, language, multi language
7
  Requires at least: 2.9
8
  Tested up to: 5.7
9
+ Stable tag: 6.0.10
10
 
11
  Translate WordPress with Google Language Translator multilanguage plugin which allows to insert Google Translate widget anywhere on your website.
12
 
155
  Yes! Add the "notranslate" class to the HTML element containing your text. For example, the following text will be excluded from translation: <span class="notranslate">Hello World!</span>
156
 
157
  == Changelog ==
158
+ = 6.0.10 =
159
+ * Possible Cross-site scripting (XSS) vulnerability fixed
160
+ User with Author role can possibly execute javascript code via glt shortcode
161
+ Kudos to pluginvulnerabilities.com for reporting
162
+ * Possible Cross-site scripting (XSS) vulnerability fixed, only possible for sub-domain, sub-directory paid options:
163
+ An attacker can generate a malicious link and if followed by a victim with an old browser without proper URL encoding support (<= IE 9) then javascript code can be executed on victim's computer.
164
+ Kudos to Ram Gall @ Wordfence for notifying
165
+
166
  = 6.0.9 =
167
  * New server added into our Translation Delivery Network
168
  * Tested with new WordPress 5.7 version