Skip to content

Known vulnerabilities in Cozmoslabs TranslatePress – Translate Multilingual sites with AI Translation

Is your version affected?

CVE Summary Score Published
CVE-2026-120537 TranslatePress <= 3.3.8 - Unauthenticated Stored Cross-Site Scripting via Comment Attribute via trp-ajax.php Dictionary Endpoint 7.2 High Nov 7, 2026
CVE-2026-119167 TranslatePress <= 3.3.8 - Unauthenticated Stored Cross-Site Scripting via Comment Content via trp-gettext Marker Smuggling and PCRE Backtrack Bypass 7.2 High Nov 7, 2026
CVE-2026-107768 The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Stored… 7.2 High Oct 16, 2026
CVE-2026-89412 The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Stored… 7.2 High Sep 22, 2026
CVE-2026-76053 The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Stored… 7.2 High Aug 28, 2026
CVE-2026-19632 The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Sensitive… 9.8 Critical Aug 26, 2026
CVE-2026-18512 The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Stored… 6.4 Medium Aug 25, 2026
CVE-2026-75981 The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to… 7.2 High Aug 19, 2026
CVE-2026-18510 The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Stored… 7.2 High Aug 6, 2026
CVE-2026-17505 The Translate Multilingual sites – TranslatePress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting… 6.1 Medium Aug 5, 2026

Other Cozmoslabs products