CVE-2020-11930
The GTranslate plugin before 2.8.52 for WordPress has Reflected XSS via a crafted link. This requires use of the hreflang tags feature within a sub-domain or sub-directory paid option.
Date published : 2020-04-19
https://plugins.trac.wordpress.org/changeset/2245581/gtranslate
https://plugins.trac.wordpress.org/changeset/2245591/gtranslate