CVE-2026-66582 Unauthenticated Cross Site Scripting (XSS) in TranslatePress <= 3.3.2 versions

Description

Unauthenticated Cross Site Scripting (XSS) in TranslatePress <= 3.3.2 versions.

Affected products and versions

Product	Affected versions	Fixed in
TranslatePress 3.3	earliest → 3.3.2	No fix stated

Other CVEs of TranslatePress

The 5 CVEs of TranslatePress →

CVE-2026-103062 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cozmoslabs… 7.1 High CVE-2026-78267 Unauthenticated Privilege Escalation in TranslatePress <= 3.3.2 versions 9.8 Critical CVE-2025-58592 Deserialization of Untrusted Data vulnerability in Cozmoslabs TranslatePress translatepress-multilingual allows Object… 8.1 High CVE-2025-30773 Deserialization of Untrusted Data vulnerability in Cozmoslabs TranslatePress translatepress-multilingual allows Object… 7.2 High