CVE-2026-17509 | WPML Multilingual CMS Plugin up to 4.9.5 on WordPress elementIds sql injection

September 8, 2026 Yanac

A vulnerability was found in WPML Multilingual CMS Plugin up to 4.9.5 on WordPress and classified as critical. This issue affects some unknown processing. Such manipulation of the argument elementIds leads to sql injection.

This vulnerability is listed as CVE-2026-17509. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More