https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-25T22:49:37.751562+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-88784 CVE-2026-88784 — Weglot < 6.4.3 - Unauthenticated Stored XSS via Translated Page Link Rewriting 2026-10-25T22:49:37.752595+00:00

Affected: Unknown Translate WordPress with Weglot 2.0

The Translate WordPress with Weglot 2.0 WordPress plugin before 6.4.3 does not escape the URLs it re-inserts into a page when rewriting links for a translated language, and reverses the encoding that was applied to them beforehand, allowing unauthenticated users to store a payload which executes in the browser of anyone viewing the page in a translated language.