What’s Vulnerable › Products

timwhitlock Loco Translate vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your timwhitlock Loco Translate version is affected

Latest timwhitlock Loco Translate vulnerabilities

• CVE-2026-15066 — Loco Translate <= 2.8.7 - Authenticated (Translator+) Stored Cross-Site Scripting via PO File Extracted Comments (CVSS 6.4)
• CVE-2026-15005 — Loco Translate <= 2.8.5 - Cross-Site Request Forgery to Remote Code Execution via 'template' Parameter (CVSS 8.8)
• CVE-2026-1921 — Loco Translate <= 2.8.2 - Authenticated (Translator+) Path Traversal to Limited File Read via 'ref' Parameter (CVSS 4.9)
• CVE-2026-4146 — Loco Translate <= 2.8.2 - Reflected Cross-Site Scripting via 'update_href' Parameter (CVSS 6.1)