Cozmoslabs
Cozmoslabs Translatepress: vulnerabilidades y CVE
Cozmoslabs Translatepress tiene 14 vulnerabilidades publicadas, 10 de ellas en los últimos 12 meses. 2 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE14
Últimos 12 meses10
Críticas2
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-103062 | Alta (7.1) | 0.15% | — | 4 oct 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cozmoslabs TranslatePress translatepress-multilingual allows Stored XSS.This issue affects TranslatePress: from n/a… |
| CVE-2026-89412 | Alta (7.2) | 0.53% | — | 22 sept 2026 | The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Translation Memory Suggestion Panel (v-html on suggestion.original) in all… |
| CVE-2026-76053 | Alta (7.2) | 0.82% | — | 28 ago 2026 | The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Noise-Key Injection into HTML Parser in all versions up to, and… |
| CVE-2026-19632 | Crítica (9.8) | 9.0% | — | 26 ago 2026 | The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.1 via the… |
| CVE-2026-18512 | Media (6.4) | 0.31% | — | 25 ago 2026 | The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Approved Comment Body Rendered in Translation Editor Strings Dropdown in all… |
| CVE-2026-78267 | Crítica (9.8) | 0.48% | — | 24 ago 2026 | Unauthenticated Privilege Escalation in TranslatePress <= 3.3.2 versions. |
| CVE-2026-66582 | Alta (7.1) | 0.25% | — | 20 ago 2026 | Unauthenticated Cross Site Scripting (XSS) in TranslatePress <= 3.3.2 versions. |
| CVE-2026-75981 | Alta (7.2) | 0.39% | — | 19 ago 2026 | The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to unauthenticated Stored Cross-Site Scripting in versions up to and including 3.2.5. The special gettext markers… |
| CVE-2026-18510 | Alta (7.2) | 0.40% | — | 6 ago 2026 | The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content (URL-encoded gettext markers) in all versions up to, and… |
| CVE-2026-17505 | Media (6.1) | 0.85% | — | 5 ago 2026 | The Translate Multilingual sites – TranslatePress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in versions up to, and including, 3.2.5. This is due to the translate_page()… |
| CVE-2025-30773 | Alta (7.2) | 0.79% | — | 27 mar 2025 | Deserialization of Untrusted Data vulnerability in Cozmoslabs TranslatePress translatepress-multilingual allows Object Injection.This issue affects TranslatePress: from n/a through <= 2.9.6. |
| CVE-2024-34827 | Media (4.3) | 0.25% | — | 14 may 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs, Razvan Mocanu, Madalin Ungureanu, Cristophor Hurduban TranslatePress.This issue affects TranslatePress: from n/a through 2.7.5. |
| CVE-2022-3141 | Alta (8.8) | 5.2% | — | 19 sept 2022 | The Translate Multilingual sites WordPress plugin before 2.3.3 is vulnerable to an authenticated SQL injection. By adding a new language (via the settings page) containing specific special characters, the backticks in… |
| CVE-2021-24610 | Media (4.8) | 5.4% | — | 27 sept 2021 | The TranslatePress WordPress plugin before 2.0.9 does not implement a proper sanitisation on the translated strings. The 'trp_sanitize_string' function only removes script tag with a regex, still allowing other HTML… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.
Otros productos de Cozmoslabs
Profile Builder · 28Membership & Content Restriction - Paid Member Subscriptions · 7Paid Member Subscriptions · 6Paid Membership Subscriptions · 6User Profile Picture · 4WP Webhooks · 2User Profile Builder · 2Client Portal · 2Translatepress-multilingual · 1Custom Post Types AND Custom Fields Creator · 1Passwordless Login · 1Profile Builder PRO · 1