{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-76053",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-28T15:23:45.717785Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-28T15:23:52.929Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "TranslatePress \u2013 Translate Multilingual sites with AI Translation",
          "vendor": "cozmoslabs",
          "versions": [
            {
              "lessThanOrEqual": "3.3.3",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "daroo"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The TranslatePress \u2013 Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Noise-Key Injection into HTML Parser in all versions up to, and including, 3.3.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation is possible because WordPress\u0027s comment KSES allowlist permits the payload structure \u2014 an anchor tag with href and title attributes alongside a code tag \u2014 causing the malicious comment to be stored verbatim in the database, where it is later processed by the vulnerable parser during page translation."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-28T02:26:56.181Z",
        "orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
        "shortName": "Wordfence"
      },
      "references": [
        {
          "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/990e04ed-ff17-4e10-9224-64a674a40416?source=cve"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/translatepress-multilingual/tags/3.3.2/assets/lib/simplehtmldom/simple_html_dom.php#L497"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/translatepress-multilingual/tags/3.3.2/assets/lib/simplehtmldom/simple_html_dom.php#L2125"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/translatepress-multilingual/tags/3.3.2/assets/lib/simplehtmldom/simple_html_dom.php#L2220"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/translatepress-multilingual/tags/3.3.2/assets/lib/simplehtmldom/simple_html_dom.php#L1549"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/translatepress-multilingual/tags/3.3.2/includes/class-translation-render.php#L664"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/translatepress-multilingual/tags/3.3.2/includes/class-translation-render.php#L1226"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/translatepress-multilingual/tags/3.3.1/assets/lib/simplehtmldom/simple_html_dom.php#L497"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/translatepress-multilingual/tags/3.3.1/assets/lib/simplehtmldom/simple_html_dom.php#L2125"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/translatepress-multilingual/tags/3.3.1/assets/lib/simplehtmldom/simple_html_dom.php#L2220"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/translatepress-multilingual/tags/3.3.1/assets/lib/simplehtmldom/simple_html_dom.php#L1549"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/translatepress-multilingual/tags/3.3.1/includes/class-translation-render.php#L664"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/translatepress-multilingual/tags/3.3.1/includes/class-translation-render.php#L1226"
        },
        {
          "url": "https://plugins.trac.wordpress.org/changeset/3665013/translatepress-multilingual/trunk/assets/lib/simplehtmldom/simple_html_dom.php"
        },
        {
          "url": "https://plugins.trac.wordpress.org/changeset?old_path=%2Ftranslatepress-multilingual/tags/3.3.3\u0026new_path=%2Ftranslatepress-multilingual/tags/3.3.4"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-18T20:24:35.000Z",
          "value": "Vendor Notified"
        },
        {
          "lang": "en",
          "time": "2026-08-27T14:13:27.000Z",
          "value": "Disclosed"
        }
      ],
      "title": "TranslatePress \u003c= 3.3.3 - Unauthenticated Stored Cross-Site Scripting via Comment Noise-Key Injection into HTML Parser"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
    "assignerShortName": "Wordfence",
    "cveId": "CVE-2026-76053",
    "datePublished": "2026-08-28T02:26:56.181Z",
    "dateReserved": "2026-08-18T20:09:21.862Z",
    "dateUpdated": "2026-08-28T15:23:52.929Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-19632",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-26T18:44:01.702803Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-26T18:51:39.601Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "TranslatePress \u2013 Translate Multilingual sites with AI Translation",
          "vendor": "cozmoslabs",
          "versions": [
            {
              "lessThanOrEqual": "3.3.1",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "momopon1415"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The TranslatePress \u2013 Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.1 via the \u0027trp_get_translations_regular\u0027 AJAX action. This makes it possible for unauthenticated attackers to extract the raw administrator password-reset URL \u2014 including the plaintext reset key and login parameters stored in the translation dictionary table \u2014 enabling full administrator account takeover. This vulnerability is only exploitable when automatic string saving is enabled (the default setting) and the target administrator\u0027s profile locale is set to a published secondary language, as these conditions cause the password-reset URL to be persisted as a translatable string in the secondary-language dictionary table."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-640",
              "description": "CWE-640 Weak Password Recovery Mechanism for Forgotten Password",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-26T03:39:22.812Z",
        "orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
        "shortName": "Wordfence"
      },
      "references": [
        {
          "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/4f4ebf09-b089-4118-a0ee-399243253f9c?source=cve"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/translatepress-multilingual/tags/3.3.1/class-translate-press.php#L531"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/translatepress-multilingual/tags/3.3.1/includes/class-translation-render.php#L2371"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/translatepress-multilingual/tags/3.3.1/includes/class-translation-render.php#L2061"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/translatepress-multilingual/tags/3.3.1/class-translate-press.php#L361"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/translatepress-multilingual/tags/3.3.1/includes/class-translation-render.php#L2257"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/translatepress-multilingual/tags/3.3.1/includes/class-editor-api-regular-strings.php#L35"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/translatepress-multilingual/tags/3.3.1/includes/class-editor-api-regular-strings.php#L93"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/translatepress-multilingual/tags/3.3.1/includes/queries/class-query.php#L1258"
        },
        {
          "url": "https://plugins.trac.wordpress.org/changeset/3645229/translatepress-multilingual"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-12T16:26:20.000Z",
          "value": "Vendor Notified"
        },
        {
          "lang": "en",
          "time": "2026-08-25T14:56:52.000Z",
          "value": "Disclosed"
        }
      ],
      "title": "TranslatePress \u2013 Multilingual \u003c= 3.3.1 - Unauthenticated Account Takeover via Password Reset Link Disclosure"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
    "assignerShortName": "Wordfence",
    "cveId": "CVE-2026-19632",
    "datePublished": "2026-08-26T03:39:22.812Z",
    "dateReserved": "2026-08-12T16:05:34.054Z",
    "dateUpdated": "2026-08-26T18:51:39.601Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-18512",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-25T11:34:23.064836Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-25T11:34:36.708Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "TranslatePress \u2013 Translate Multilingual sites with AI Translation",
          "vendor": "cozmoslabs",
          "versions": [
            {
              "lessThanOrEqual": "3.2.6",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "momopon1415"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The TranslatePress \u2013 Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Approved Comment Body Rendered in Translation Editor Strings Dropdown in all versions up to, and including, 3.2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-25T07:39:51.116Z",
        "orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
        "shortName": "Wordfence"
      },
      "references": [
        {
          "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/e1b18095-d328-4658-81fc-7b15ca526c18?source=cve"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/translatepress-multilingual/tags/3.2.6/assets/src/js/editor.vue#L914"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/translatepress-multilingual/tags/3.2.6/assets/src/js/editor.vue#L909"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/translatepress-multilingual/tags/3.2.6/assets/src/js/utils.js#L26"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/translatepress-multilingual/tags/3.2.6/assets/src/js/editor.vue#L923"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/translatepress-multilingual/tags/3.2.6/includes/class-translation-render.php#L527"
        },
        {
          "url": "https://plugins.trac.wordpress.org/changeset?reponame=\u0026new=3634273%40translatepress-multilingual%2Ftags%2F3.3\u0026old=3624567%40translatepress-multilingual%2Ftags%2F3.2.6"
        },
        {
          "url": "https://plugins.trac.wordpress.org/changeset/3634273/translatepress-multilingual/trunk/assets/src/js/editor.vue"
        },
        {
          "url": "https://plugins.trac.wordpress.org/changeset?old_path=%2Ftranslatepress-multilingual/tags/3.2.6\u0026new_path=%2Ftranslatepress-multilingual/tags/3.3"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-07-31T17:43:36.000Z",
          "value": "Vendor Notified"
        },
        {
          "lang": "en",
          "time": "2026-08-24T19:07:10.000Z",
          "value": "Disclosed"
        }
      ],
      "title": "TranslatePress \u003c= 3.2.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Approved Comment Body in Translation Editor"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
    "assignerShortName": "Wordfence",
    "cveId": "CVE-2026-18512",
    "datePublished": "2026-08-25T07:39:51.116Z",
    "dateReserved": "2026-07-31T17:27:52.857Z",
    "dateUpdated": "2026-08-25T11:34:36.708Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-75981",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-19T15:45:14.831409Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-19T15:45:24.401Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "TranslatePress \u2013 Translate Multilingual sites with AI Translation",
          "vendor": "cozmoslabs",
          "versions": [
            {
              "lessThanOrEqual": "3.2.5",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Pham Duc Anh"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The TranslatePress \u2013 Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to unauthenticated Stored Cross-Site Scripting in versions up to and including 3.2.5. The special gettext markers \u0027#!trpst#\u0027 and \u0027#!trpen#\u0027 are unconditionally rewritten to \u0027\u003c\u0027 and \u0027\u003e\u0027 by translate_page() in includes/class-translation-render.php (lines 538-539). Because those markers are plain text with no HTML-special characters, an unauthenticated attacker can embed them in a comment; the markers survive wp_kses, and when the post is viewed in a secondary language the substitution turns the attacker\u0027s \u0027#!trpst#img ... #!trpen#\u0027 into a real \u003cimg\u003e tag. remove_tags_from_output() only strips \u003cscript\u003e/\u003cstyle\u003e, so an \u003cimg onerror=...\u003e executes in the visitor\u0027s browser."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-19T06:37:55.093Z",
        "orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
        "shortName": "Wordfence"
      },
      "references": [
        {
          "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/fec48853-afa5-4310-be2e-e86c01ece227?source=cve"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/translatepress-multilingual/tags/3.2.5/includes/class-translation-render.php#L538"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/translatepress-multilingual/tags/3.2.5/includes/class-translation-render.php#L539"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-18T18:38:26.000Z",
          "value": "Vendor Notified"
        },
        {
          "lang": "en",
          "time": "2026-08-18T18:23:24.000Z",
          "value": "Disclosed"
        }
      ],
      "title": "TranslatePress \u2013 Translate Multilingual sites with AI Translation \u003c= 3.2.5 - Unauthenticated Stored Cross-Site Scripting"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
    "assignerShortName": "Wordfence",
    "cveId": "CVE-2026-75981",
    "datePublished": "2026-08-19T06:37:55.093Z",
    "dateReserved": "2026-08-18T18:22:48.496Z",
    "dateUpdated": "2026-08-19T15:45:24.401Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-18510",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-06T15:30:38.771748Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-06T15:37:16.079Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "TranslatePress \u2013 Translate Multilingual sites with AI Translation",
          "vendor": "cozmoslabs",
          "versions": [
            {
              "lessThanOrEqual": "3.2.6",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Pham Duc Anh"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The TranslatePress \u2013 Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content (URL-encoded gettext markers) in all versions up to, and including, 3.2.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Comment moderation may delay exploitation for first-time commenters, but does not prevent it, as the payload uses only WordPress-permitted tags and attributes with percent-encoded characters that pass wp_kses URL validation unmodified."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-06T05:29:25.581Z",
        "orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
        "shortName": "Wordfence"
      },
      "references": [
        {
          "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/ca97a718-7508-4bc0-8f8e-7849eb9a0dc0?source=cve"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/translatepress-multilingual/tags/3.2.6/includes/class-translation-render.php#L1575"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/translatepress-multilingual/tags/3.2.6/includes/class-translation-render.php#L1314"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/translatepress-multilingual/tags/3.2.6/includes/class-translation-render.php#L1232"
        },
        {
          "url": "https://plugins.trac.wordpress.org/changeset?reponame=\u0026new=3634273%40translatepress-multilingual%2Ftags%2F3.3\u0026old=3624567%40translatepress-multilingual%2Ftags%2F3.2.6"
        },
        {
          "url": "https://plugins.trac.wordpress.org/changeset/3634273/translatepress-multilingual/trunk/includes/class-translation-render.php"
        },
        {
          "url": "https://plugins.trac.wordpress.org/changeset?old_path=%2Ftranslatepress-multilingual/tags/3.2.6\u0026new_path=%2Ftranslatepress-multilingual/tags/3.3"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-07-31T17:38:14.000Z",
          "value": "Vendor Notified"
        },
        {
          "lang": "en",
          "time": "2026-08-05T17:09:31.000Z",
          "value": "Disclosed"
        }
      ],
      "title": "TranslatePress \u003c= 3.2.6 - Unauthenticated Stored Cross-Site Scripting via Comment Content"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
    "assignerShortName": "Wordfence",
    "cveId": "CVE-2026-18510",
    "datePublished": "2026-08-06T05:29:25.581Z",
    "dateReserved": "2026-07-31T17:21:44.035Z",
    "dateUpdated": "2026-08-06T15:37:16.079Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-17505",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-05T15:55:00.493322Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-05T15:55:10.726Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "TranslatePress \u2013 Translate Multilingual sites with AI Translation",
          "vendor": "cozmoslabs",
          "versions": [
            {
              "lessThanOrEqual": "3.2.5",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "momopon1415"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Translate Multilingual sites \u2013 TranslatePress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u0027s\u0027 parameter in versions up to, and including, 3.2.5. This is due to the translate_page() function unconditionally replacing the plugin\u0027s internal #!trpst# and #!trpen# marker tokens with literal angle brackets across the entire HTML page output after WordPress has already sanitized and escaped user input \u2014 allowing the attacker to bypass WordPress\u0027s normal HTML escaping by using these tokens, which are not HTML special characters, in the search query. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a specially crafted link."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T06:37:57.133Z",
        "orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
        "shortName": "Wordfence"
      },
      "references": [
        {
          "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/81d28e90-252f-4b5f-a55b-8cb96292538e?source=cve"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/translatepress-multilingual/tags/3.2.5/class-translate-press.php#L443"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/translatepress-multilingual/tags/3.2.5/includes/class-translation-render.php#L538"
        },
        {
          "url": "https://plugins.trac.wordpress.org/browser/translatepress-multilingual/tags/3.2.5/includes/class-search.php#L150"
        },
        {
          "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=\u0026sfph_mail=\u0026reponame=\u0026new=3624567%40translatepress-multilingual%2Ftrunk%2Fincludes%2Fclass-translation-render.php\u0026old=3617108"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-07-26T20:53:54.000Z",
          "value": "Vendor Notified"
        },
        {
          "lang": "en",
          "time": "2026-08-04T18:24:12.000Z",
          "value": "Disclosed"
        }
      ],
      "title": "TranslatePress \u003c= 3.2.5 - Reflected Cross-Site Scripting"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599",
    "assignerShortName": "Wordfence",
    "cveId": "CVE-2026-17505",
    "datePublished": "2026-08-05T06:37:57.133Z",
    "dateReserved": "2026-07-26T20:33:50.293Z",
    "dateUpdated": "2026-08-05T15:55:10.726Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}