CVE-2026-78267— WordPress TranslatePress plugin <= 3.3.2 - Privilege Escalation vulnerability
Quick assessment
Affected
Cozmoslabs TranslatePress
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 TranslatePress ≤ 3.3.2 版本中存在未认证的权限提升漏洞。
Possible ATT&CK Techniques 1 AI
T1068 · Exploitation for Privilege EscalationAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Cozmoslabs | TranslatePress | n/a≤ 3.3.2 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-78267
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
WordPress TranslatePress plugin <= 3.3.2 - Privilege Escalation vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
Unauthenticated Privilege Escalation in TranslatePress <= 3.3.2 versions.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
特权授予不正确
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cozmoslabs | TranslatePress | n/a ~ 3.3.2 | - |
|
II. Public POCs for CVE-2026-78267
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
default-local-qwen3.6
· 9396 chars
Pro+ exclusive includes:
Vulnerability reproduction recording (real sandbox build + trigger, exclusive)
In-depth vulnerability mechanism
Trigger conditions & impact
Full executable POC code
Exploit chain & mitigation
POC zip download
100+ AI POC generations per month
III. Intelligence Information for CVE-2026-78267
请登录查看更多情报信息。
News Coverage for CVE-2026-78267 (1)
IV. Related Vulnerabilities
Same product: TranslatePress
-
CVE-2026-66582
WordPress TranslatePress plugin <= 3.3.2 - Cross Site Script -
CVE-2025-58592
WordPress TranslatePress Plugin <= 2.10.2 - Deserialization -
CVE-2025-30773
WordPress TranslatePress plugin <= 2.9.6 - PHP Object Inject -
CVE-2024-34827
WordPress Translate Multilingual sites – TranslatePress plug
Same vendor: Cozmoslabs
-
CVE-2026-19632
TranslatePress – Multilingual <= 3.3.1 - Unauthenticated Acc -
CVE-2026-18512
TranslatePress <= 3.2.6 - Authenticated (Subscriber+) Stored -
CVE-2026-66582
WordPress TranslatePress plugin <= 3.3.2 - Cross Site Script -
CVE-2026-75981
TranslatePress – Translate Multilingual sites with AI Transl -
CVE-2026-15826
User Profile Builder <= 3.16.4 - Unauthenticated Authenticat
Same weakness: CWE-266
-
CVE-2026-78477
Jawn <= 1.4.2 - Unauthenticated Privilege Escalation -
CVE-2026-32561
WordPress Booking Hub plugin <= 1.3.0 - Privilege Escalation -
CVE-2026-21756
HCL Hive is affected by a broken access control vulnerabilit -
CVE-2026-66648
WordPress Jawn theme <= 1.4.2 - Privilege Escalation vulnera -
CVE-2026-32558
WordPress Affiliate Pro - Affiliate Program for WooCommerce
V. Comments for CVE-2026-78267
No comments yet