Vulnerabilities / Loco Translate
Loco Translate vulnerabilities
Advisories WPSec published for Loco Translate. Other sources may list more. Its attack surface: Loco Translate on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-01 | WPSEC-2026-0044 | Loco Translate <= 2.8.8 - Authenticated (Translator+) Stored Cross-Site Scripting via Project File Prefix | Medium 5.5 | 2.8.9 |
| 2026-10-01 | WPSEC-2026-0043 | Loco Translate <= 2.8.8 - Authenticated (Translator+) Path Traversal to Limited File Read via Download Endpoint | Medium 4.9 | 2.8.9 |
| 2026-10-01 | WPSEC-2026-0042 | Loco Translate <= 2.8.8 - Authenticated (Translator+) Arbitrary File and Directory Deletion via Backup Revision Delete | Medium 6.5 | 2.8.9 |
License: CC BY 4.0