Translatepress Security Vulnerabilities and Issues — Translatepress CVE List

Lucene search

CozmoslabsTranslatepress

3 matches found

CVE•added 2021/09/27 4:15 p.m.•60 views

CVE-2021-24610

The TranslatePress WordPress plugin before 2.0.9 does not implement a proper sanitisation on the translated strings. The 'trp_sanitize_string' function only removes script tag with a regex, still allowing other HTML tags and attributes to execute javascript, which could lead to authenticated Stored...

4.8CVSS4.8AI score0.01572EPSS

CVE•added 2022/09/19 2:15 p.m.•59 views

CVE-2022-3141

The Translate Multilingual sites WordPress plugin before 2.3.3 is vulnerable to an authenticated SQL injection. By adding a new language (via the settings page) containing specific special characters, the backticks in the SQL query can be surpassed and a time-based blind payload can be injected.

8.8CVSS8.9AI score0.00754EPSS

CVE•added 2025/03/27 11:15 a.m.•35 views

CVE-2025-30773

Deserialization of Untrusted Data vulnerability in Cozmoslabs TranslatePress allows Object Injection. This issue affects TranslatePress: from n/a through 2.9.6.

7.2CVSS7AI score0.00066EPSS