{"affected":[{"defaultStatus":"unaffected","ecosystem":"https://wordpress.org/plugins","packageName":"wplingua","product":"Translate and boost SEO &#8211; Automatic AI translation &#8211; wpLingua","source":"CNA: Patchstack","vendor":"wpLingua Translation Service","versions":[{"changes":[{"at":"3.2.0","status":"unaffected"}],"lessThanOrEqual":"3.1.1","status":"affected","version":"0","versionType":"custom"}]}],"cveId":"CVE-2026-124410","cwes":["CWE-79"],"description":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpLingua Translation Service Translate and boost SEO &#8211; Automatic AI translation &#8211; wpLingua wplingua allows Stored XSS.This issue affects Translate and boost SEO &#8211; Automatic AI translation &#8211; wpLingua: from n/a through 3.1.1.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":7.1,"severity":"high","source":"CNA: Patchstack","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","version":"3.1"}],"modifiedAt":1794585447854,"publishedAt":1794582522902,"references":[{"source":"CNA: Patchstack","tags":["vdb-entry"],"url":"https://patchstack.com/database/wordpress/plugin/wplingua/vulnerability/wordpress-translate-and-boost-seo-automatic-ai-translation-wplingua-plugin-3-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve"}],"remediation":[{"kind":"fix","source":"CNA: Patchstack","text":"Update the WordPress Translate and boost SEO &#8211; Automatic AI translation &#8211; wpLingua plugin to the latest available version (at least 3.2.0)."}],"revision":"c433fc9e813da97c6c1a463c66a98f347c50450d913f9f1a552644b229eb3155","sources":[{"modifiedAt":1794585447854,"name":"CNA: Patchstack","retrievedAt":1794586150153,"url":"https://www.cve.org/CVERecord?id=CVE-2026-124410"}],"ssvc":{"assessedAt":1794585418734,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"WordPress Translate and boost SEO – Automatic AI translation – wpLingua plugin <= 3.1.1 - Cross Site Scripting (XSS) vulnerability","updatedAt":1794586150153}