Plugin icon

Translate WordPress with Weglot 2.0 – Multilingual AI Translation

weglot

Vulnerabilities:

4

Last Updated:

October 15, 2026

Active Installs:

50000

Published
Title
Fixed in
CVSS
Published
2026-10-19
Title
Weglot < 6.4.3 - Unauthenticated Stored XSS via Translated Page Link Rewriting
Fixed in
Fixed in 6.4.3
CVSS
7.5 (high)
Published
2025-10-29
Title
Translate WordPress and go Multilingual – Weglot < 5.2 - Missing Authorization to Unauthenticated Limited Transient Deletion
Fixed in
Fixed in 5.2
CVSS
5.3 (medium)
Published
2024-03-19
Title
Translate WordPress and go Multilingual – Weglot < 4.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributes
Fixed in
Fixed in 4.2.6
CVSS
6.4 (medium)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.9.3
CVSS
6.1 (medium)