Medium · 4.3 CVE-2026-65537 EUVD-2026-48138GHSA-rf26-7hf8-jj9c

WordPress Cyr to Lat reloaded – transliteration of links and file names plugin <= 1.3.3 - Broken Access Control vulnerability

Published Jul 23, 2026 · Updated Jul 23, 2026 · Assigned by Patchstack

Description

Subscriber Broken Access Control in Cyr to Lat reloaded – transliteration of links and file names <= 1.3.3 versions.

Vendor	Product	Affected	Fixed
Themeisle	Cyr to Lat reloaded – transliteration of links and file names	≤ 1.3.3	—