What’s Vulnerable › Products

cozmoslabs TranslatePress – Translate Multilingual sites with AI Translation vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your cozmoslabs TranslatePress – Translate Multilingual sites with AI Translation version is affected

Latest cozmoslabs TranslatePress – Translate Multilingual sites with AI Translation vulnerabilities

• CVE-2026-107768 — TranslatePress <= 3.3.7 - Unauthenticated Stored Cross-Site Scripting via Comment Anchor href with trp-gettext/TRPLINKPROCESSED Markers (CVSS 7.2)
• CVE-2026-89412 — TranslatePress <= 3.3.5 - Unauthenticated Stored Cross-Site Scripting via Translation Memory Suggestion Panel (CVSS 7.2)
• CVE-2026-76053 — TranslatePress <= 3.3.3 - Unauthenticated Stored Cross-Site Scripting via Comment Noise-Key Injection into HTML Parser (CVSS 7.2)
• CVE-2026-19632 — TranslatePress – Multilingual <= 3.3.1 - Unauthenticated Account Takeover via Password Reset Link Disclosure (CVSS 9.8)
• CVE-2026-18512 — TranslatePress <= 3.2.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Approved Comment Body in Translation Editor (CVSS 6.4)
• CVE-2026-75981 — TranslatePress – Translate Multilingual sites with AI Translation <= 3.2.5 - Unauthenticated Stored Cross-Site Scripting (CVSS 7.2)
• CVE-2026-18510 — TranslatePress <= 3.2.6 - Unauthenticated Stored Cross-Site Scripting via Comment Content (CVSS 7.2)
• CVE-2026-17505 — TranslatePress <= 3.2.5 - Reflected Cross-Site Scripting (CVSS 6.1)