TranslatePress – Translate Multilingual sites with AI Translation vulnerabilities

Product

TranslatePress – Translate Multilingual sites with AI Translation

by cozmoslabs · last CVE Oct 16, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Severity mix

Critical 1High 5Medium 2Low 0

Severity

Exploitation

Watch

Add TranslatePress – Translate Multilingual sites with AI Translation to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-107768	7.2	0%	Oct 16	TranslatePress <= 3.3.7 - Unauthenticated Stored Cross-Site Scripting via Comment Anchor href with trp-gettext/TRPLINKPROCESSED Markers Affected: through 3.3.7
CVE-2026-89412	7.2	1%	Sep 22	TranslatePress <= 3.3.5 - Unauthenticated Stored Cross-Site Scripting via Translation Memory Suggestion Panel Affected: through 3.3.5
CVE-2026-76053	7.2	1%	Aug 28	TranslatePress <= 3.3.3 - Unauthenticated Stored Cross-Site Scripting via Comment Noise-Key Injection into HTML Parser Affected: through 3.3.3
CVE-2026-75981	7.2	0%	Aug 19	TranslatePress – Translate Multilingual sites with AI Translation <= 3.2.5 - Unauthenticated Stored Cross-Site Scripting Affected: through 3.2.5
CVE-2026-18510	7.2	0%	Aug 6	TranslatePress <= 3.2.6 - Unauthenticated Stored Cross-Site Scripting via Comment Content Affected: through 3.2.6