What’s Vulnerable › Products

WPML Multilingual CMS vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your WPML Multilingual CMS version is affected

Latest WPML Multilingual CMS vulnerabilities

• CVE-2026-17509 — WPML Multilingual CMS <= 4.9.5 - Incorrect Authorization to Authenticated (Subscriber+) SQL Injection via ‘elementIds’ (CVSS 6.5)
• CVE-2026-12248 — WPML Multilingual CMS <= 4.9.5 - Authenticated (Translator+) SQL Injection via 'sorting' Parameter (CVSS 6.5)