CVE-2026-76053

TranslatePress – Translate Multilingual sites with AI Translation, a WordPress translation plugin, contains a stored cross-site scripting flaw in all versions up to and including 3.3.3, caused by insufficient input sanitization and output escaping in its HTML parser. An unauthenticated attacker submits a comment containing an anchor tag with href and title attributes alongside a code tag; this structure is permitted by WordPress's comment KSES allowlist, so it is stored verbatim in the database. When the plugin later parses that comment during page translation, the stored markup is injected into the rendered page, causing the attacker's arbitrary web script to execute in the browser of anyone who views the affected page. Any WordPress site running TranslatePress 3.3.3 or earlier that accepts comments is affected, and successful injection could let the attacker hijack sessions or act as viewing users, including administrators (reflected in the CVSS scope change). No exploitation is currently known; EPSS estimates a 0.3% probability of exploitation within 30 days and the issue is not in CISA KEV.

What to do: Update TranslatePress to a version newer than 3.3.3 as soon as the vendor publishes a patched release. Until then, restrict or disable comment submission on translated pages, review stored comments for anchor tags with href/title attributes paired with code tags, and consider WAF rules that block such comment payloads.