What’s Vulnerable › Products

Loco Translate vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Loco Translate version is affected

Latest Loco Translate vulnerabilities

• CVE-2026-94239 — Loco Translate < 2.8.9 - Translator+ Stored XSS via Bundle Configuration (CVSS 6.8)
• CVE-2026-94238 — Loco Translate < 2.8.9 - Translator+ Limited File Read via 'path' Parameter (CVSS 6.8)
• CVE-2022-0765 — Loco Translate < 2.6.1 - Authenticated Stored Cross-Site Scripting (CVSS 5.4)
• CVE-2021-24721 — Loco Translate < 2.5.4 - Authenticated PHP Code Injection (CVSS 6.5)