Advisories · Technology

Cozmoslabs TranslatePress.

Every CVE that names Cozmoslabs TranslatePress among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-121765 CVE record

CVSS 7.1 High

WordPress TranslatePress plugin <= 3.3.8 - Cross Site Scripting (XSS) vulnerability
- Cozmoslabs TranslatePress
- Cross-site scripting (XSS)
Not analysed yet 7 Nov 2026
CVE-2026-103062 CVE record

CVSS 7.1 High

WordPress TranslatePress plugin <= 3.3.6 - Cross Site Scripting (XSS) vulnerability
- Cozmoslabs TranslatePress
- Cross-site scripting (XSS)
Not analysed yet 4 Oct 2026
CVE-2026-78267 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WordPress TranslatePress plugin <= 3.3.2 - Privilege Escalation vulnerability
- Cozmoslabs TranslatePress
- Privilege escalation
Not analysed yet 24 Aug 2026
CVE-2026-66582 CVE record

CVSS 7.1 High

WordPress TranslatePress plugin <= 3.3.2 - Cross Site Scripting (XSS) vulnerability
- Cozmoslabs TranslatePress
- Cross-site scripting (XSS)
Not analysed yet 20 Aug 2026
CVE-2025-58592 CVE record

CVSS 8.1 High

WordPress TranslatePress Plugin <= 2.10.2 - Deserialization of untrusted data Vulnerability
- Cozmoslabs TranslatePress
- Insecure deserialization
Not analysed yet 6 Nov 2025
CVE-2025-30773 CVE record

CVSS 7.2 High

WordPress TranslatePress plugin <= 2.9.6 - PHP Object Injection Vulnerability
- Cozmoslabs TranslatePress
- Insecure deserialization
Not analysed yet 27 Mar 2025