CVE-2026-103062
published 2026-10-04CVE-2026-103062: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cozmoslabs TranslatePress translatepress-multilingual…
PriorityP429high7.1CVSS 3.1
AVNACLPRNUIRSCCLILAL
EPSS
0.15%
3.3th percentile
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cozmoslabs TranslatePress translatepress-multilingual allows Stored XSS.This issue affects TranslatePress: from n/a through 3.3.6.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cozmoslabs | translatepress | <= 3.3.6 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Cozmoslabs TranslatePress Plugin up to 3.3.6 on WordPress cross site scripting (EUVD-2026-92084)
vuldb·2026-10-04·CVSS 7.1
CVE-2026-103062 [HIGH] Cozmoslabs TranslatePress Plugin up to 3.3.6 on WordPress cross site scripting (EUVD-2026-92084)
A vulnerability was found in Cozmoslabs TranslatePress Plugin up to 3.3.6 on WordPress. It has been declared as problematic. Affected is an unknown function. The manipulation results in cross site scripting.
This vulnerability is reported as CVE-2026-103062. The attack can be launched remotely. No exploit exists.
GHSA
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cozmoslabs TranslatePress translatepress-multilingual allows Stored XSS.This issue affects Transla
ghsa_unreviewed·2026-10-04
CVE-2026-103062 [HIGH] CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cozmoslabs TranslatePress translatepress-multilingual allows Stored XSS.This issue affects Transla
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cozmoslabs TranslatePress translatepress-multilingual allows Stored XSS.This issue affects TranslatePress: from n/a through 3.3.6.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-10-04
Published