Cozmoslabs TranslatePress vulnerabilities and fixes
Exploited and high-severity Cozmoslabs TranslatePress vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.
- 7.1CVE-2026-121765WordPress TranslatePress plugin <= 3.3.8 - Cross Site Scripting (XSS) vulnerabilityVerify fixCozmoslabs TranslatePress
1 min read - 7.2CVE-2026-120537TranslatePress <= 3.3.8 - Unauthenticated Stored Cross-Site Scripting via Comment Attribute via trp-ajax.php Dictionary EndpointVerify fixcozmoslabs TranslatePress – Translate Multilingual sites with AI Translation
1 min read - 7.2CVE-2026-119167TranslatePress <= 3.3.8 - Unauthenticated Stored Cross-Site Scripting via Comment Content via trp-gettext Marker Smuggling and PCRE Backtrack BypassVerify fixcozmoslabs TranslatePress – Translate Multilingual sites with AI Translation
1 min read