Medium · 5.4 CVE-2026-107419 EUVD-2026-95726GHSA-2rxj-mcm9-wrqm

WordPress AI Translation for Polylang plugin <= 1.6.2 - Broken Access Control vulnerability

Published Oct 9, 2026 · Updated Oct 11, 2026 · Assigned by Patchstack

Vendor: Cool Plugins Product: AI Translation for Polylang

Description

Missing Authorization vulnerability in Cool Plugins AI Translation for Polylang automatic-translations-for-polylang allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Translation for Polylang: from n/a through 1.6.2.

Affected products

Vendor	Product	Affected	Fixed
Cool Plugins	AI Translation for Polylang	≤ 1.6.2	—

References

https://patchstack.com/database/wordpress/plugin/automatic-translations-for-polylang/vulnerability/wordpress-ai-translation-for-polylang-plugin-1-6-2-broken-access-control-vulnerability?_s_id=cve vdb-entry