CVE-2026-78267: WordPress TranslatePress plugin <= 3.3.2 - Privilege Escalation vulnerability
Published Aug 24, 2026
·Updated
Unauthenticated Privilege Escalation in TranslatePress <= 3.3.2 versions.
Affected Software
1 affected component
WordPress TranslatePress Plugin<=3.3.2
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress TranslatePress pluginto a version that resolves this vulnerability.Fixed in 3.3.3
Event History
Aug 24, 2026
CVE Published
via MITRE·09:31 PM
Data Sourced
via MITRE·09:31 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·10:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
The vulnerability is unauthenticated, so an attacker does not need a WordPress account or existing privileges to attempt exploitation.
2
What versions are affected?
TranslatePress plugin versions 3.3.2 and earlier are identified as affected.
3
What is the potential impact of successful exploitation?
Successful exploitation can result in privilege escalation. The supplied severity vector indicates potential high impact to confidentiality, integrity, and availability.