Weglot CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

Review Weglot CVE published 2026-10-21

CVE-2026-88784

CVE-2026-88784 is a vulnerability in the Translate WordPress with Weglot 2.0 plugin before version 6.4.3. The plugin does not properly escape URLs when rewriting links for translated pages, allowing unauthenticated stored cross-site scripting (XSS). This vulnerability affects WordPress environments using the Translate WordPress with Weglot 2.0 plugin. Defenders should assess exposure and prioritize updati [truncated]