TranslatePress – Translate Multilingual sites with AI Translation — Vulnerabilities & Security Advisories 7

All 7 CVE vulnerabilities found in TranslatePress – Translate Multilingual sites with AI Translation, with AI-generated Chinese analysis, references, and POCs.

Vendor: cozmoslabs

CVE ID	Title	CVSS	Severity	Published
CVE-2026-89412	TranslatePress <= 3.3.5 - Unauthenticated Stored Cross-Site Scripting via Translation Memory Suggestion Panel CWE-79	7.2	High	2026-09-22
CVE-2026-76053	TranslatePress <= 3.3.3 - Unauthenticated Stored Cross-Site Scripting via Comment Noise-Key Injection into HTML Parser CWE-79	7.2	High	2026-08-28
CVE-2026-19632	TranslatePress – Multilingual <= 3.3.1 - Unauthenticated Account Takeover via Password Reset Link Disclosure CWE-640	9.8	Critical	2026-08-26
CVE-2026-18512	TranslatePress <= 3.2.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Approved Comment Body in Translation Editor CWE-79	6.4	Medium	2026-08-25
CVE-2026-75981	TranslatePress – Translate Multilingual sites with AI Translation <= 3.2.5 - Unauthenticated Stored Cross-Site Scripting CWE-79	7.2	High	2026-08-19
CVE-2026-18510	TranslatePress <= 3.2.6 - Unauthenticated Stored Cross-Site Scripting via Comment Content CWE-79	7.2	High	2026-08-06
CVE-2026-17505	TranslatePress <= 3.2.5 - Reflected Cross-Site Scripting CWE-79	6.1	Medium	2026-08-05

All 7 known CVE vulnerabilities affecting TranslatePress – Translate Multilingual sites with AI Translation with full Chinese analysis, references, and POCs where available.