Unknown Loco Translate
2 known vulnerabilities in Unknown Loco Translate, with patch priority, exploit likelihood and the news covering them.
Latest vulnerabilities
- CVE-2026-94239 CVSS 6.8 medium The Loco Translate WordPress plugin before 2.8.9 does not sanitise and escape some bundle configuration values before outputting them back…
- CVE-2026-94238 CVSS 6.8 medium The Loco Translate WordPress plugin before 2.8.9 does not restrict which file paths its translation file routes will read, allowing users…