Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:translatepress:translatepress:*:*:*:*:*:wordpress:*:*

2 briefs RSS
high advisory

Stored Cross-Site Scripting in TranslatePress WordPress Plugin

The TranslatePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the comment parameter, allowing unauthenticated attackers to execute arbitrary web scripts.

TranslatePress – Translate Multilingual sites with AI Translation
1r 2t 1c
high advisory

Stored Cross-Site Scripting in TranslatePress WordPress Plugin

The TranslatePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) via the Translation Memory Suggestion Panel, allowing unauthenticated attackers to execute arbitrary scripts in administrator sessions.

TranslatePress web-application xss wordpress cve-2026-89412
2t 1c