WordPress Loco Translate < 2.6.1 - Cross-Site Scripting

Loco Translate WordPress plugin before 2.6.1 contains a stored cross-site scripting vulnerability caused by improper removal of inline events from source translation strings, allowing authenticated users to inject arbitrary JavaScript payloads. id: CVE-2022-0765 info: name: WordPress Loco Transla...

CVE-2025-67887

🛡️ Fix for the "vulnerability" CVE-2025-67887/86 in the 1C-Bitrix Translate module 1C-Bitrix Security The Information Security and Incident Monitoring Center of 1C-Bitrix informs Information appeared in Telegram channels about a vulnerability in the "Translate" module allegedly allowing...

CVE-2025-67887

CVE-2025-67887 1C-Bitrix = 25.100.500 Translate Module Remote Code Execution Vulnerability...

CVE-2025-67886

CVE-2025-67886 Bitrix24 = 25.100.300 Translate Module Remote Code Execution Vulnerability...

VulnCheck KEV: CVE-2026-94238

The Loco Translate WordPress plugin before 2.8.9 does not restrict which file paths its translation file routes will read, allowing users granted the Loco Translate WordPress plugin before 2.8.9's translator capability to retrieve the contents of files of certain types from anywhere on the server...

Translate Component DoS

The vulnerability in the Translate component of Google Chrome and Microsoft Edge web browsers is related to use-after-free memory usage. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by sending a specially crafted HTML page...

WordPress Infility Global plugin < 2.16.25 - Unauthenticated Google Translate API Key Update vulnerability

Unauthenticated Google Translate API Key Update vulnerability discovered by Enrico Marcolini, Claudio Marchesini, Dottor Marc in WordPress Plugin Infility Global versions 2.16.25...

WordPress Translate WordPress with Weglot 2.0 plugin < 6.4.3 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Jakub Herman in WordPress Plugin Weglot Translate versions 6.4.3...

CVE-2026-84913

Missing Authorization vulnerability in Drupal AI Translate allows Forceful Browsing. This issue affects AI Translate versions: from 0.0.0 to 1.3.2, from 1.4.0 to 1.4.1...

CVE-2026-84913 AI translate - Moderately critical - Access Bypass - SA-CONTRIB-2026-121

Missing Authorization vulnerability in Drupal AI Translate allows Forceful Browsing. This issue affects AI Translate versions: from 0.0.0 to 1.3.2, from 1.4.0 to 1.4.1...

CVE-2026-84913 AI translate - Moderately critical - Access Bypass - SA-CONTRIB-2026-121

Missing Authorization vulnerability in Drupal AI Translate allows Forceful Browsing. This issue affects AI Translate versions: from 0.0.0 to 1.3.2, from 1.4.0 to 1.4.1...

CVE-2026-84912

Missing Authorization vulnerability in Drupal AI Artificial Intelligence allows Forceful Browsing. This issue affects AI Artificial Intelligence versions: from 0.0.0 to 1.3.13, from 1.4.0 to 1.4.8...

CVE-2026-84913

Missing Authorization vulnerability in Drupal AI Translate allows Forceful Browsing. This issue affects AI Translate versions: from 0.0.0 to 1.3.2, from 1.4.0 to 1.4.1...

CVE-2026-84913 AI translate - Moderately critical - Access Bypass - SA-CONTRIB-2026-121

Missing Authorization vulnerability in Drupal AI Translate allows Forceful Browsing. This issue affects AI Translate versions: from 0.0.0 to 1.3.2, from 1.4.0 to 1.4.1...

EUVD-2026-107878

Missing Authorization vulnerability in Drupal AI Translate allows Forceful Browsing. This issue affects AI Translate versions: from 0.0.0 to 1.3.2, from 1.4.0 to 1.4.1...

CVE-2026-84913

A Missing Authorization vulnerability in the Drupal AI Translate module (versions 0.0.0 to 1.3.2 and 1.4.0 to 1.4.1) allows for Forceful Browsing . The root cause is that the module fails to sufficiently verify access permissions for the entity being translated, its related fields, or referenced ...

Drupal AI Translate authorization issue vulnerability

Drupal AI Translate versions prior to 0.0.0 and 1.3.2, as well as versions prior to 1.4.0 and 1.4.1, contain an authorization issue vulnerability stemming from a lack of authorization checks. This vulnerability may lead to forced browsing...

CVE-2026-88784

The Translate WordPress with Weglot 2.0 WordPress plugin before 6.4.3 does not escape the URLs it re-inserts into a page when rewriting links for a translated language, and reverses the encoding that was applied to them beforehand, allowing unauthenticated users to store a payload which executes ...

CVE-2026-88784

The Translate WordPress with Weglot 2.0 plugin (versions before 6.4.3 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is a failure to escape URLs during the link rewriting process for translated languages, coupled with a reversal of previous encoding. This allows unauthentic...

EUVD-2026-107088

The Translate WordPress with Weglot 2.0 WordPress plugin before 6.4.3 does not escape the URLs it re-inserts into a page when rewriting links for a translated language, and reverses the encoding that was applied to them beforehand, allowing unauthenticated users to store a payload which executes ...