Security
فارسی
All products

translatepress-multilingual

WordPress · Plugin
19 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
TranslatePress – Translate Multilingual sites with AI Translation <= 3.3.8 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-121765 translatepress-multilingual WordPress High Fix reported
TranslatePress <= 3.3.8 - Unauthenticated Stored Cross-Site Scripting via Comment Attribute via trp-ajax.php Dictionary EndpointCVE-2026-120537 translatepress-multilingual WordPress High Fix reported
TranslatePress <= 3.3.8 - Unauthenticated Stored Cross-Site Scripting via Comment Content via trp-gettext Marker Smuggling and PCRE Backtrack BypassCVE-2026-119167 translatepress-multilingual WordPress High Fix reported
TranslatePress <= 3.3.7 - Unauthenticated Stored Cross-Site Scripting via Comment Anchor href with trp-gettext/TRPLINKPROCESSED MarkersCVE-2026-107768 translatepress-multilingual WordPress High Fix reported
TranslatePress – Translate Multilingual sites with AI Translation <= 3.3.6 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-103062 translatepress-multilingual WordPress High Fix reported
TranslatePress <= 3.3.5 - Unauthenticated Stored Cross-Site Scripting via Translation Memory Suggestion PanelCVE-2026-89412 translatepress-multilingual WordPress High Fix reported
TranslatePress – Translate Multilingual sites with AI Translation <= 3.3.2 - Unauthenticated Privilege EscalationCVE-2026-78267 translatepress-multilingual WordPress High Fix reported
TranslatePress <= 3.3.3 - Unauthenticated Stored Cross-Site Scripting via Comment Noise-Key Injection into HTML ParserCVE-2026-76053 translatepress-multilingual WordPress High Fix reported
TranslatePress – Multilingual <= 3.3.1 - Unauthenticated Account Takeover via Password Reset Link DisclosureCVE-2026-19632 translatepress-multilingual WordPress Critical Fix reported
TranslatePress <= 3.2.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Approved Comment Body in Translation EditorCVE-2026-18512 translatepress-multilingual WordPress Medium Fix reported
TranslatePress – Translate Multilingual sites with AI Translation <= 3.3.2 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-66582 translatepress-multilingual WordPress High Fix reported
TranslatePress – Translate Multilingual sites with AI Translation <= 3.2.5 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-75981 translatepress-multilingual WordPress High Fix reported
TranslatePress <= 3.2.6 - Unauthenticated Stored Cross-Site Scripting via Comment ContentCVE-2026-18510 translatepress-multilingual WordPress High Fix reported
TranslatePress <= 3.2.5 - Reflected Cross-Site ScriptingCVE-2026-17505 translatepress-multilingual WordPress Medium Fix reported
TranslatePress <= 2.10.2 - Unauthenticated PHP Object InjectionCVE-2025-58592 translatepress-multilingual WordPress High Fix reported
TranslatePress <= 2.9.6 - Authenticated (Administrator+) PHP Object InjectionCVE-2025-30773 translatepress-multilingual WordPress High Fix reported
Translate Multilingual sites – TranslatePress <= 2.7.5 - Cross-Site Request ForgeryCVE-2024-34827 translatepress-multilingual WordPress Medium Fix reported
TranslatePress <= 2.3.2 - Authenticated (Administrator+) SQL InjectionCVE-2022-3141 translatepress-multilingual WordPress High Fix reported
TranslatePress <= 2.0.8 - Authenticated Stored Cross-Site ScriptingCVE-2021-24610 translatepress-multilingual WordPress Medium Fix reported