TranslatePress – Translate Multilingual sites with AI Translation

Уязвимости

• CVE-2026-19632без авторизации≤ 3.3.1

  TranslatePress – Multilingual <= 3.3.1 - Unauthenticated Account Takeover via Password Reset Link Disclosure

  Критич. 9.8

• CVE-2026-78267без авторизации≤ 3.3.2

  WordPress TranslatePress plugin <= 3.3.2 - Privilege Escalation vulnerability

  Критич. 9.8

• CVE-2025-58592без авторизации≤ 2.10.2

  WordPress TranslatePress Plugin <= 2.10.2 - Deserialization of untrusted data Vulnerability

  Высокий 8.1

• CVE-2026-89412без авторизации≤ 3.3.5

  TranslatePress <= 3.3.5 - Unauthenticated Stored Cross-Site Scripting via Translation Memory Suggestion Panel

  Высокий 7.2

• CVE-2026-76053без авторизации≤ 3.3.3

  TranslatePress <= 3.3.3 - Unauthenticated Stored Cross-Site Scripting via Comment Noise-Key Injection into HTML Parser

  Высокий 7.2

• CVE-2026-75981без авторизации≤ 3.2.5

  TranslatePress – Translate Multilingual sites with AI Translation <= 3.2.5 - Unauthenticated Stored Cross-Site Scripting

  Высокий 7.2

• CVE-2026-18510без авторизации≤ 3.2.6

  TranslatePress <= 3.2.6 - Unauthenticated Stored Cross-Site Scripting via Comment Content

  Высокий 7.2

• CVE-2025-30773высокие права≤ 2.9.6

  WordPress TranslatePress plugin <= 2.9.6 - PHP Object Injection Vulnerability

  Высокий 7.2

• CVE-2026-66582без авторизации · нужен клик≤ 3.3.2

  WordPress TranslatePress plugin <= 3.3.2 - Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2026-18512подписчик+≤ 3.2.6

  TranslatePress <= 3.2.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Approved Comment Body in Translation Editor

  Средний 6.4

• CVE-2026-17505без авторизации · нужен клик≤ 3.2.5

  TranslatePress <= 3.2.5 - Reflected Cross-Site Scripting

  Средний 6.1

• CVE-2024-34827без авторизации · нужен клик≤ 2.7.5

  WordPress Translate Multilingual sites – TranslatePress plugin <= 2.7.5 - Cross Site Request Forgery (CSRF) vulnerability

  Средний 4.3