Critical · 9.8 CVE-2026-78267 EUVD-2026-65174GHSA-6pq2-4w9g-5v25

WordPress TranslatePress plugin <= 3.3.2 - Privilege Escalation vulnerability

Published Aug 24, 2026 · Updated Aug 27, 2026 · Assigned by Patchstack

Vendor: Cozmoslabs Product: TranslatePress

Description

Unauthenticated Privilege Escalation in TranslatePress <= 3.3.2 versions.

Affected products

Vendor	Product	Affected	Fixed
Cozmoslabs	TranslatePress	≤ 3.3.2	—

References

https://patchstack.com/database/wordpress/plugin/translatepress-multilingual/vulnerability/wordpress-translatepress-plugin-3-3-2-privilege-escalation-vulnerability?_s_id=cve vdb-entry