Cozmoslabs Translatepress
6 CVEs affecting Cozmoslabs Translatepress. Latest disclosed: 2026-08-24. Critical: 1, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-78267 | Critical | 9.8 | 2026-08-24 | Unauthenticated Privilege Escalation in TranslatePress <= 3.3.2 versions. |
CVE-2022-3141 | High | 8.8 | 2022-09-19 | The Translate Multilingual sites WordPress plugin before 2.3.3 is vulnerable to an authenticated SQL injection. By adding a new language (via the settings page… |
CVE-2025-58592 | High | 8.1 | 2025-11-06 | Deserialization of Untrusted Data vulnerability in Cozmoslabs TranslatePress translatepress-multilingual allows Object Injection.This issue affects TranslatePr… |
CVE-2025-30773 | High | 7.2 | 2025-03-27 | Deserialization of Untrusted Data vulnerability in Cozmoslabs TranslatePress translatepress-multilingual allows Object Injection.This issue affects TranslatePr… |
CVE-2026-66582 | High | 7.1 | 2026-08-20 | Unauthenticated Cross Site Scripting (XSS) in TranslatePress <= 3.3.2 versions. |
CVE-2021-24610 | Medium | 4.8 | 2021-09-27 | The TranslatePress WordPress plugin before 2.0.9 does not implement a proper sanitisation on the translated strings. The 'trp_sanitize_string' function only re… |