CVE-2026-120537 | Cozmoslabs TranslatePress Plugin up to 3.3.8 on WordPress Comment original_language cross site scripting

November 7, 2026 Yanac

A vulnerability was found in Cozmoslabs TranslatePress Plugin up to 3.3.8 on WordPress. It has been classified as problematic. This vulnerability affects unknown code of the component Comment Handler. The manipulation of the argument original_language leads to cross site scripting.

This vulnerability is traded as CVE-2026-120537. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More