CVE-2026-121765highCWE-79

CVE-2026-121765: falha de alta gravidade em Cozmoslabs TranslatePress

WordPress TranslatePress plugin <= 3.3.8 - Cross Site Scripting (XSS) vulnerability

Publicada em

Seguir esta CVE+ Monitorar TranslatePress

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

18Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.1
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cozmoslabs TranslatePress translatepress-multilingual allows Stored XSS.This issue affects TranslatePress: from n/a through 3.3.8.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Produtos afetados
Cozmoslabs · TranslatePress
CVEs relacionadas — Cozmoslabs TranslatePress

No mesmo produto, das mais perigosas para as menos.

CVE-2025-30773HIGHWordPress TranslatePress plugin <= 2.9.6 - PHP Object Injection VulnerabilityEPSS 0.8%CVE-2026-78267CRITICALWordPress TranslatePress plugin <= 3.3.2 - Privilege Escalation vulnerabilityEPSS 0.5%CVE-2025-58592HIGHWordPress TranslatePress Plugin <= 2.10.2 - Deserialization of untrusted data VulnerabilityEPSS 0.4%CVE-2026-66582HIGHWordPress TranslatePress plugin <= 3.3.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-103062HIGHWordPress TranslatePress plugin <= 3.3.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%