CVE-2026-78267
published 2026-08-24CVE-2026-78267: Unauthenticated Privilege Escalation in TranslatePress <= 3.3.2 versions.
PriorityP261critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
0.27%
20.0th percentile
Unauthenticated Privilege Escalation in TranslatePress <= 3.3.2 versions.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cozmoslabs | translatepress | n/a – 3.3.2 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Unauthenticated Privilege Escalation in TranslatePress <= 3.3.2 versions.
ghsa_unreviewed·2026-08-25
CVE-2026-78267 [CRITICAL] CWE-266 Unauthenticated Privilege Escalation in TranslatePress <= 3.3.2 versions.
Unauthenticated Privilege Escalation in TranslatePress <= 3.3.2 versions.
VulDB
Cozmoslabs TranslatePress Plugin up to 3.3.2 on WordPress privileges management
vuldb·2026-08-24·CVSS 9.8
CVE-2026-78267 [CRITICAL] Cozmoslabs TranslatePress Plugin up to 3.3.2 on WordPress privileges management
A vulnerability was found in Cozmoslabs TranslatePress Plugin up to 3.3.2 on WordPress. It has been declared as critical. This vulnerability affects unknown code. The manipulation results in improper privilege management.
This vulnerability was named CVE-2026-78267. The attack may be performed from remote. There is no available exploit.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-08-24
Published