High · 7.1 CVE-2026-66582 EUVD-2026-63331GHSA-x2x9-hx7f-h28x

WordPress TranslatePress plugin <= 3.3.2 - Cross Site Scripting (XSS) vulnerability

Published Aug 20, 2026 · Updated Aug 20, 2026 · Assigned by Patchstack

Vendor: Cozmoslabs Product: TranslatePress

Description

Unauthenticated Cross Site Scripting (XSS) in TranslatePress <= 3.3.2 versions.

Affected products

Vendor	Product	Affected	Fixed
Cozmoslabs	TranslatePress	≤ 3.3.2	—

References

https://patchstack.com/database/wordpress/plugin/translatepress-multilingual/vulnerability/wordpress-translatepress-plugin-3-3-2-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry