Skip to contentCozmoslabs Translatepress – Translate Multilingual Sites With Ai Translation vulnerabilities
- cozmoslabs translatepress – translate multilingual sites with ai translationTranslatePress <= 3.3.8 - Unauthenticated Stored Cross-Site Scripting via Comment Attribute via trp-ajax.php Dictionary EndpointCVE-2026-1205377.2 High
- cozmoslabs translatepress – translate multilingual sites with ai translationTranslatePress <= 3.3.8 - Unauthenticated Stored Cross-Site Scripting via Comment Content via trp-gettext Marker Smuggling and PCRE Backtrack BypassCVE-2026-1191677.2 High
- cozmoslabs translatepress – translate multilingual sites with ai translationTranslatePress <= 3.3.7 - Unauthenticated Stored Cross-Site Scripting via Comment Anchor href with trp-gettext/TRPLINKPROCESSED MarkersCVE-2026-1077687.2 High
- cozmoslabs translatepress – translate multilingual sites with ai translationTranslatePress <= 3.3.5 - Unauthenticated Stored Cross-Site Scripting via Translation Memory Suggestion PanelCVE-2026-894127.2 High
- cozmoslabs translatepress – translate multilingual sites with ai translationTranslatePress <= 3.3.3 - Unauthenticated Stored Cross-Site Scripting via Comment Noise-Key Injection into HTML ParserCVE-2026-760537.2 High
- cozmoslabs translatepress – translate multilingual sites with ai translationTranslatePress – Multilingual <= 3.3.1 - Unauthenticated Account Takeover via Password Reset Link DisclosureCVE-2026-19632Public exploit9.8 Critical
- cozmoslabs translatepress – translate multilingual sites with ai translationTranslatePress <= 3.2.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Approved Comment Body in Translation EditorCVE-2026-185126.4 Medium
- cozmoslabs translatepress – translate multilingual sites with ai translationTranslatePress – Translate Multilingual sites with AI Translation <= 3.2.5 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-759817.2 High
- cozmoslabs translatepress – translate multilingual sites with ai translationTranslatePress <= 3.2.6 - Unauthenticated Stored Cross-Site Scripting via Comment ContentCVE-2026-185107.2 High
- cozmoslabs translatepress – translate multilingual sites with ai translationTranslatePress <= 3.2.5 - Reflected Cross-Site ScriptingCVE-2026-175056.1 Medium