TranslatePress vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

TR

Product

TranslatePress

by Cozmoslabs · last CVE Oct 4, 2026

7

CVEs

0

On KEV

9.8

Max CVSS

1

New 30D

Vulnerabilities7 In the news0 Timeline

Severity mix

Critical 1High 5Medium 1Low 0

Severity

All severities7 Critical1 High5 Medium1 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add TranslatePress to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-78267	9.8	0%	Aug 24	WordPress TranslatePress plugin <= 3.3.2 - Privilege Escalation vulnerability Affected: through 3.3.2
CVE-2022-3141	8.8	5%	Sep 19	The Translate Multilingual sites WordPress plugin before 2.3.3 is vulnerable to an authenticated SQL injection Affected: before 2.3.3
CVE-2025-58592	8.1	0%	Nov 6	WordPress TranslatePress Plugin <= 2.10.2 - Deserialization of untrusted data Vulnerability Affected: through 2.10.2
CVE-2025-30773	7.2	1%	Mar 27	WordPress TranslatePress plugin <= 2.9.6 - PHP Object Injection Vulnerability Affected: through 2.9.6
CVE-2026-103062	7.1	0%	Oct 4	WordPress TranslatePress plugin <= 3.3.6 - Cross Site Scripting (XSS) vulnerability Affected: through 3.3.6
CVE-2026-66582	7.1	0%	Aug 20	WordPress TranslatePress plugin <= 3.3.2 - Cross Site Scripting (XSS) vulnerability Affected: through 3.3.2
CVE-2021-24610	4.8	5%	Sep 27	The TranslatePress WordPress plugin before 2.0.9 does not implement a proper sanitisation on the translated strings Affected: before 2.0.9