CVE-2026-73342 Unauthenticated Cross Site Scripting (XSS) in WP Multilang <= 2.4.31 versions

Description

Unauthenticated Cross Site Scripting (XSS) in WP Multilang <= 2.4.31 versions.

Affected products and versions

Product	Affected versions	Fixed in
WP Multilang 2.4	earliest → 2.4.31	No fix stated

Other CVEs of WP Multilang

The 2 CVEs of WP Multilang →

CVE-2025-49307 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in… 7.5 High