The WordPress Multi-Language (WPML) plugin is vulnerable to security issues. It contains certain actions that do not check permissions or verify that an action was intended. This means that anyone who is logged in can change the default content, change settings for old widgets, and cancel translations.