Plugin icon

TranslatePress – Translate Multilingual sites with AI Translation

translatepress-multilingual

Vulnerabilities:

12

Last Updated:

September 15, 2026

Active Installs:

400000

Published
Title
Fixed in
CVSS
Published
2026-08-27
Title
TranslatePress < 3.3.4 - Unauthenticated Stored XSS via Comment Noise-Key Injection
Fixed in
Fixed in 3.3.4
CVSS
7.2 (high)
Published
2026-08-25
Title
TranslatePress < 3.3.2 - Unauthenticated Account Takeover via Password Reset Link Disclosure
Fixed in
Fixed in 3.3.2
CVSS
8.1 (high)
Published
2026-08-24
Title
TranslatePress < 3.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Approved Comment Body in Translation Editor
Fixed in
Fixed in 3.3
CVSS
6.4 (medium)
Published
2026-08-24
Title
TranslatePress < 3.3.3 - Unauthenticated Privilege Escalation
Fixed in
Fixed in 3.3.3
CVSS
7.3 (high)
Published
2026-08-19
Title
TranslatePress < 3.3.3 - Unauthenticated Stored XSS
Fixed in
Fixed in 3.3.3
CVSS
7.2 (high)
Published
2026-08-18
Title
TranslatePress < 3.2.6 - Unauthenticated Stored XSS via Gettext Markers
Fixed in
Fixed in 3.2.6
CVSS
7.2 (high)
Published
2026-08-05
Title
TranslatePress < 3.3 - Unauthenticated Stored XSS via Comment Content
Fixed in
Fixed in 3.3
CVSS
7.2 (high)
Published
2026-08-04
Title
TranslatePress < 3.2.6 - Reflected Cross-Site Scripting
Fixed in
Fixed in 3.2.6
CVSS
6.1 (medium)
Published
2025-09-24
Title
TranslatePress < 2.10.3 - Unauthenticated PHP Object Injection
Fixed in
Fixed in 2.10.3
CVSS
8.1 (high)
Published
2025-03-27
Title
TranslatePress < 2.9.7 - Admin+ PHP Object Injection
Fixed in
Fixed in 2.9.7
CVSS
4.7 (medium)
Published
2022-07-23
Title
Translatepress Multilinugal < 2.3.3 - Admin+ SQLi
Fixed in
Fixed in 2.3.3
CVSS
6.8 (medium)
Published
2021-08-30
Title
TranslatePress < 2.0.9 - Authenticated Stored Cross-Site Scripting
Fixed in
Fixed in 2.0.9
CVSS
3.8 (low)