Skip to contentCozmoslabs Translatepress vulnerabilities
- cozmoslabs translatepressWordPress TranslatePress plugin <= 3.3.8 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-1217657.1 High
- cozmoslabs translatepress – translate multilingual sites with ai translationTranslatePress <= 3.3.8 - Unauthenticated Stored Cross-Site Scripting via Comment Attribute via trp-ajax.php Dictionary EndpointCVE-2026-1205377.2 High
- cozmoslabs translatepress – translate multilingual sites with ai translationTranslatePress <= 3.3.8 - Unauthenticated Stored Cross-Site Scripting via Comment Content via trp-gettext Marker Smuggling and PCRE Backtrack BypassCVE-2026-1191677.2 High
- cozmoslabs translatepress – translate multilingual sites with ai translationTranslatePress <= 3.3.7 - Unauthenticated Stored Cross-Site Scripting via Comment Anchor href with trp-gettext/TRPLINKPROCESSED MarkersCVE-2026-1077687.2 High
- cozmoslabs translatepressWordPress TranslatePress plugin <= 3.3.6 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-1030627.1 High
- cozmoslabs translatepress – translate multilingual sites with ai translationTranslatePress <= 3.3.5 - Unauthenticated Stored Cross-Site Scripting via Translation Memory Suggestion PanelCVE-2026-894127.2 High
- cozmoslabs translatepress – translate multilingual sites with ai translationTranslatePress <= 3.3.3 - Unauthenticated Stored Cross-Site Scripting via Comment Noise-Key Injection into HTML ParserCVE-2026-760537.2 High
- cozmoslabs translatepress – translate multilingual sites with ai translationTranslatePress – Multilingual <= 3.3.1 - Unauthenticated Account Takeover via Password Reset Link DisclosureCVE-2026-19632Public exploit9.8 Critical
- cozmoslabs translatepress – translate multilingual sites with ai translationTranslatePress <= 3.2.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Approved Comment Body in Translation EditorCVE-2026-185126.4 Medium
- cozmoslabs translatepressWordPress TranslatePress plugin <= 3.3.2 - Privilege Escalation vulnerabilityCVE-2026-782679.8 Critical
- cozmoslabs translatepressWordPress TranslatePress plugin <= 3.3.2 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-665827.1 High
- cozmoslabs translatepress – translate multilingual sites with ai translationTranslatePress – Translate Multilingual sites with AI Translation <= 3.2.5 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-759817.2 High
- cozmoslabs translatepress – translate multilingual sites with ai translationTranslatePress <= 3.2.6 - Unauthenticated Stored Cross-Site Scripting via Comment ContentCVE-2026-185107.2 High
- cozmoslabs translatepress – translate multilingual sites with ai translationTranslatePress <= 3.2.5 - Reflected Cross-Site ScriptingCVE-2026-175056.1 Medium
- cozmoslabs translatepressWordPress TranslatePress Plugin <= 2.10.2 - Deserialization of untrusted data VulnerabilityCVE-2025-585928.1 High
- cozmoslabs translatepressWordPress TranslatePress plugin <= 2.9.6 - PHP Object Injection VulnerabilityCVE-2025-307737.2 High
- cozmoslabs translatepressWordPress Translate Multilingual sites – TranslatePress plugin <= 2.7.5 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2024-348274.3 Medium
- cozmoslabs translatepress, unknown translate multilingual sites – translatepress +1 moreTranslatepress Multilinugal < 2.3.3 - Admin+ SQLiCVE-2022-3141Public exploit8.8 High
- cozmoslabs translatepress, unknown translate multilingual sites – translatepress +1 moreTranslatePress < 2.0.9 - Authenticated Stored Cross-Site ScriptingCVE-2021-24610Public exploit4.8 Medium