The Qtranslate Slug plugin for WordPress is not secure in versions up to 1.1.18. It is possible for people outside of the website to manipulate the data stored on the site without proper authentication. This can be done by creating a link that a website administrator would have to click on.