64 matches found
CVE-2026-93698
Insufficient validation allows arbitrary commands to be executed via the Multilang adminbin...
CVE-2026-93698
A vulnerability in the Multilang adminbin allows for arbitrary command execution due to insufficient validation . This flaw is associated with CWE-78 (Improper Neutralization of Special Elements used in an OS Command). The vulnerability has a CRITICAL severity score of 9.9 , indicating a high imp...
EUVD-2026-91198
Insufficient validation allows arbitrary commands to be executed via the Multilang adminbin...
CVE-2026-93698
Insufficient validation allows arbitrary commands to be executed via the Multilang adminbin...
CVE-2026-93698
Insufficient validation allows arbitrary commands to be executed via the Multilang adminbin...
PT-2026-104097
Name of the Vulnerable Software and Affected Versions cPanel & WHM affected versions not specified Description Insufficient validation in the Multilang adminbin allows for the execution of arbitrary commands, which can grant root-level access to the server. Additionally, stored Cross-Site Scripti...
CVE-2026-15731
The WP Multilang – Translation and Multilingual Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post content in all versions up to, and including, 2.4.31 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers...
CVE-2026-15731
The WP Multilang – Translation and Multilingual Plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 2.4.31 . The root cause is insufficient input sanitization and output escaping within the post content. This allows authenticated attackers with ...
EUVD-2026-85837
The WP Multilang – Translation and Multilingual Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post content in all versions up to, and including, 2.4.31 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers...
CVE-2026-15731 WP Multilang – Translation and Multilingual Plugin <= 2.4.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Content
The WP Multilang – Translation and Multilingual Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post content in all versions up to, and including, 2.4.31 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers...
CVE-2026-15731 WP Multilang – Translation and Multilingual Plugin <= 2.4.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Content
The WP Multilang – Translation and Multilingual Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post content in all versions up to, and including, 2.4.31 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers...
CVE-2026-15731: Improper Neutralization of Input During Web Page Generation
The WP Multilang – Translation and Multilingual Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post content in all versions up to, and including, 2.4.31 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers...
PT-2026-97775
Name of the Vulnerable Software and Affected Versions WP Multilang – Translation and Multilingual Plugin versions prior to 2.4.32 Description Insufficient input sanitization and output escaping allow authenticated attackers with Contributor-level access and above to perform Stored Cross-Site...
WordPress WP Multilang – Translation and Multilingual Plugin plugin <= 2.4.31 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Athiwat Tiprasaharn Jitlada, Itthidej Aramsri Boeing777 in WordPress Plugin WP Multilang versions = 2.4.31...
CVE-2026-73342
Unauthenticated Cross Site Scripting XSS in WP Multilang = 2.4.31 versions...
CVE-2026-73342
Unauthenticated Cross Site Scripting XSS in WP Multilang = 2.4.31 versions...
CVE-2026-73342
The WordPress WP Multilang plugin (versions 2.4.31 and earlier) contains an unauthenticated stored/reflected XSS flaw exploitable via network access with no privileges, scoring CVSS 7.1 (HIGH); exploitation requires user interaction and impacts confidentiality, integrity, and availability at low ...
CVE-2026-73342 WordPress WP Multilang plugin <= 2.4.31 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in WP Multilang = 2.4.31 versions...