CVE-2026-14548: Ray Enterprise Translation <= 1.7.3 - Subscriber+ Arbitrary API Token Update

Published Aug 11, 2026

Updated

The Ray Enterprise Translation WordPress plugin through 1.7.3 does not perform any capability or nonce checks on one of its AJAX actions, allowing any authenticated user, including Subscribers, to overwrite the administrator-configured translation API token with an arbitrary value.

Affected Software

1 affected component

Ray Enterprise Translation WordPress plugin<=1.7.3

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Ray Enterprise Translation WordPress plugin to a version that resolves this vulnerability.
Fixed in 1.7.3

Event History

Aug 11, 2026

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2026-14548?

CVE-2026-14548 has a severity rating of 48, indicating a significant risk due to the potential for arbitrary API token overwrites.

How do I fix CVE-2026-14548?

To fix CVE-2026-14548, upgrade the Ray Enterprise Translation plugin to version 1.7.4 or higher where the vulnerability is patched.

What are the implications of CVE-2026-14548?

CVE-2026-14548 allows authenticated users, including low-privileged Subscribers, to change the translation API token, potentially compromising sensitive configurations.

Which versions of the Ray Enterprise Translation plugin are affected by CVE-2026-14548?

All versions of the Ray Enterprise Translation plugin up to and including 1.7.3 are affected by CVE-2026-14548.

Who is vulnerable to the CVE-2026-14548 attack?

Any website using the Ray Enterprise Translation plugin version 1.7.3 or earlier and allowing authenticated users to access AJAX actions is vulnerable to CVE-2026-14548.

CVE-2026-14548: Ray Enterprise Translation <= 1.7.3 - Subscriber+ Arbitrary API Token Update

Affected Software

Remediation

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2026-14548?

How do I fix CVE-2026-14548?

What are the implications of CVE-2026-14548?

Which versions of the Ray Enterprise Translation plugin are affected by CVE-2026-14548?

Who is vulnerable to the CVE-2026-14548 attack?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2026-14548?

How do I fix CVE-2026-14548?

What are the implications of CVE-2026-14548?

Which versions of the Ray Enterprise Translation plugin are affected by CVE-2026-14548?

Who is vulnerable to the CVE-2026-14548 attack?