Skip to content

Known vulnerabilities in Unknown Loco Translate

Is your version affected?

CVE Summary Score Published
CVE-2026-94238 The Loco Translate WordPress plugin before 2.8.9 does not restrict which file paths its translation file routes will… 6.8 Medium Oct 3, 2026
CVE-2026-94239 The Loco Translate WordPress plugin before 2.8.9 does not sanitise and escape some bundle configuration values before… 6.8 Medium Oct 3, 2026
CVE-2022-0765 The Loco Translate WordPress plugin before 2.6.1 does not properly remove inline events from elements in the source… Not rated Apr 18, 2022
CVE-2021-24721 The Loco Translate WordPress plugin before 2.5.4 mishandles data inputs which get saved to a file, which can be… Not rated Nov 8, 2021

Other Unknown products