l
loco translate
Security Risk Profile
52
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 4 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 16, 2026 to present
4
Total CVEs
1
Critical+High
0
Exploited
1
Unpatched
Threat Assessment
Avg CVSS
7.2
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
52/100
medium
🆕 2Fresh (<7d)📈 2 in Last 30 Days
Severity Distribution
Critical
0High
1Medium
3Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
XSS
2
2
Path Traversal
1
3
CSRF
1
Most Affected Products
1. Loco Translate Loco Translate WordPress plugin1
2. Loco Translate Loco Translate1
3. Loco Translate WordPress plugin1
4. Loco Translate Loco Translate plugin for WordPress1
Recent Vulnerabilities
See more →CVE-2026-94238
CVSS 6.8medium
Loco Translate < 2.8.9 - Translator+ Limited File Read via 'path' Parameter
Oct 3, 2026🔧 No Patch
CVE-2026-94239
CVSS 6.8medium
Loco Translate < 2.8.9 - Translator+ Stored XSS via Bundle Configuration
Oct 3, 2026🔧 No Patch
CVE-2026-15066
CVSS 6.4medium
Loco Translate <= 2.8.7 - Authenticated (Translator+) Stored Cross-Site Scripting via PO File Extracted Comments
Aug 16, 2026🔧 No Patch
CVE-2026-15005
CVSS 8.8high
Loco Translate <= 2.8.5 - Cross-Site Request Forgery to Remote Code Execution via 'template' Parameter
Jul 16, 2026🔧 No Patch
Monitor loco translate in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.