Skip to content
OpenAdvisories
High · 7.1 CVE-2026-124410 EUVD-2026-125428GHSA-jq8p-p7f7-mwg7

WordPress Translate and boost SEO – Automatic AI translation – wpLingua plugin <= 3.1.1 - Cross Site Scripting (XSS) vulnerability

Published Nov 13, 2026 · Updated Nov 13, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpLingua Translation Service Translate and boost SEO &#8211; Automatic AI translation &#8211; wpLingua wplingua allows Stored XSS.This issue affects Translate and boost SEO &#8211; Automatic AI translation &#8211; wpLingua: from n/a through 3.1.1.

Affected products

VendorProductAffectedFixed
wpLingua Translation Service Translate and boost SEO &#8211; Automatic AI translation &#8211; wpLingua ≤ 3.1.1 —

References