CVE-2026-94239 | Loco Translate Plugin up to 2.8.8 on WordPress cross site scripting

October 3, 2026 Yanac

A vulnerability was found in Loco Translate Plugin up to 2.8.8 on WordPress and classified as problematic. This impacts an unknown function. Such manipulation leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-94239. The attack can be launched remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More