cve.bz

cozmoslabs translatepress vulnerabilities, newest first

Filter

By year: all 2026 2025 2024 2023 2022 2021

  1. 7.1CVE-2026-121765EPSS 0.2%

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cozmoslabs TranslatePress translatepress-multilingual allows Stored XSS.This issue affects TranslatePress: from n/a through 3.3.8.

  2. 7.1CVE-2026-103062EPSS 0.1%

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cozmoslabs TranslatePress translatepress-multilingual allows Stored XSS.This issue affects TranslatePress: from n/a through 3.3.6.

  3. 9.8CVE-2026-78267EPSS 0.5%

    Unauthenticated Privilege Escalation in TranslatePress <= 3.3.2 versions.

  4. 7.1CVE-2026-66582EPSS 0.3%

    Unauthenticated Cross Site Scripting (XSS) in TranslatePress <= 3.3.2 versions.

  5. 8.1CVE-2025-58592EPSS 0.4%

    Deserialization of Untrusted Data vulnerability in Cozmoslabs TranslatePress translatepress-multilingual allows Object Injection.This issue affects TranslatePress: from n/a through <= 2.10.2.

  6. 7.2CVE-2025-30773EPSS 0.8%

    Deserialization of Untrusted Data vulnerability in Cozmoslabs TranslatePress translatepress-multilingual allows Object Injection.This issue affects TranslatePress: from n/a through <= 2.9.6.

  7. 8.8CVE-2022-3141ExploitEPSS 5.3%

    The Translate Multilingual sites WordPress plugin before 2.3.3 is vulnerable to an authenticated SQL injection. By adding a new language (via the settings page) containing specific special characters, the backticks in the SQL query can be …

  8. 4.8CVE-2021-24610ExploitEPSS 5.4%

    The TranslatePress WordPress plugin before 2.0.9 does not implement a proper sanitisation on the translated strings. The 'trp_sanitize_string' function only removes script tag with a regex, still allowing other HTML tags and attributes to …