WordPress security by component
Smartcat Translator for WPML
Plugin description
Smartcat Translator for WPML is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published May 15, 2026; the highest CVE/CNA score is 6.5.
Plugin slug:
smartcat-wpmlLatest vulnerability
CVE-2026-4683: Smartcat Translator for WPML: A security weakness
Smartcat Translator for WPML is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 3.1.77.
| Safe version |
|
||
|---|---|---|---|
| May 15, 2026 |
CVE-2026-4683
Smartcat Translator for WPML: A security weakness
Smartcat Translator for WPML is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 3.1.77.
|
> 3.1.77 |
CVE6.5
NVDPending
|
| Sep 11, 2025 |
CVE-2025-9451
Smartcat Translator for WPML: SQL injection
Smartcat Translator for WPML is affected by SQL injection. Exploitation requires at least author-level access. A successful request can alter database queries and expose or modify WordPress data.
|
See mitigation notes |
CVE6.5
NVDPending
|