WordPress plugin
Translate WordPress with Weglot 2.0 – Multilingual AI Translation security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 3 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High1
- Medium2
- Low0
All Translate WordPress with Weglot 2.0 – Multilingual AI Translation vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.2 | Unauthenticated Stored Cross-Site Scripting ≤6.4.2Update to 6.4.3 | CVE-2026-88784 | |
| Medium5.3 | Missing Authorization to Unauthenticated Limited Transient Deletion ≤5.1Update to 5.2 | CVE-2025-10008 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributes ≤4.2.5Update to 4.2.6 | CVE-2024-2124 |
- High7.2Unauthenticated Stored Cross-Site Scripting
≤6.4.2Update to 6.4.3
- Medium5.3Missing Authorization to Unauthenticated Limited Transient Deletion
≤5.1Update to 5.2
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributes
≤4.2.5Update to 4.2.6
Translate WordPress with Weglot 2.0 – Multilingual AI Translation: common questions
Does Translate WordPress with Weglot 2.0 – Multilingual AI Translation have known vulnerabilities?
Yes. VulnCrest Radar lists 3 known vulnerabilities in Translate WordPress with Weglot 2.0 – Multilingual AI Translation: 1 high, 2 medium. None are known to affect version null.
How do I check which version of Translate WordPress with Weglot 2.0 – Multilingual AI Translation I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Translate WordPress with Weglot 2.0 – Multilingual AI Translation vulnerability?
CVE-2026-88784, published Oct 19, 2026: Weglot <= 6.4.2 - Unauthenticated Stored Cross-Site Scripting. Severity: High (CVSS 7.2).
Is any Translate WordPress with Weglot 2.0 – Multilingual AI Translation vulnerability listed in CISA KEV?
No. None of the known Translate WordPress with Weglot 2.0 – Multilingual AI Translation vulnerabilities is currently listed in the CISA KEV catalog.