Pricing
Case studies
Login
Start trial
TranslatePress
Cozmoslabs
Developer
3.3.4
Latest version
400,000
Installations
No date
Last updated
WordPress Plugin
Active VDP
Report vulnerability
Vulnerabilities
Security Policy
Security Contributors
Vulnerability history
0 present
13 patched
9 Mitigation rules
Unauthenticated Account Takeover vulnerability
<= 3.3.1
4 days ago
Authenticated (Subscriber+) Stored Cross-Site Scripting via Approved Comment Body in Translation Editor vulnerability
<= 3.2.6
28/08/2026
Unauthenticated Stored Cross-Site Scripting via Comment Noise-Key Injection into HTML Parser vulnerability
<= 3.3.3
28/08/2026
Privilege Escalation vulnerability
<= 3.3.2
24/08/2026
WordPress TranslatePress - Translate Multilingual sites with AI Translation plugin <= 3.2.5 - Unauthenticated Stored Cross-Site Scripting vulnerability
<= 3.2.5
20/08/2026
Cross Site Scripting (XSS) vulnerability
<= 3.3.2
19/08/2026
Unauthenticated Stored Cross-Site Scripting vulnerability
<= 3.2.6
06/08/2026
Reflected Cross-Site Scripting vulnerability
<= 3.2.5
06/08/2026
Deserialization of untrusted data Vulnerability
<= 2.10.2
24/09/2025
PHP Object Injection Vulnerability
<= 2.9.6
27/03/2025
Cross Site Request Forgery (CSRF) vulnerability
<= 2.7.5
09/05/2024
Authenticated SQL Injection (SQLi) vulnerability
<= 2.3.2
23/07/2022
Authenticated Stored Cross-Site Scripting (XSS) vulnerability
<= 2.0.8
30/08/2021