Cozmoslabs TranslatePress vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Cozmoslabs TranslatePress: 4 record(s), with affected versions and fixes.

CVE-2026-103062 High · 7.1 CWE-79 Oct 4, 2026

WordPress TranslatePress plugin <= 3.3.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cozmoslabs TranslatePress translatepress-multilingual allows Stored XSS.This issue affects TranslatePress: from n/a through 3.3.6.

CVE-2026-78267 Critical · 9.8 CWE-266 Aug 24, 2026

WordPress TranslatePress plugin <= 3.3.2 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in TranslatePress <= 3.3.2 versions.

CVE-2026-66582 High · 7.1 CWE-79 Aug 20, 2026

WordPress TranslatePress plugin <= 3.3.2 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in TranslatePress <= 3.3.2 versions.

CVE-2025-58592 High · 8.1 CWE-502 Nov 6, 2025

WordPress TranslatePress Plugin <= 2.10.2 - Deserialization of untrusted data Vulnerability

Deserialization of Untrusted Data vulnerability in Cozmoslabs TranslatePress translatepress-multilingual allows Object Injection.This issue affects TranslatePress: from n/a through <= 2.10.2.