VYPR

Translate WordPress with Weglot

by WordPress

CVEs (1)

  • CVE-2026-88784Oct 21, 2026
    risk 0.00cvss —epss —

    The Translate WordPress with Weglot 2.0 WordPress plugin before 6.4.3 does not escape the URLs it re-inserts into a page when rewriting links for a translated language, and reverses the encoding that was applied to them beforehand, allowing unauthenticated users to store a…