CVE-2026-73342

HighCVSS 7.1

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.24%

15th percentile - higher than 15% of all known CVEs

Summary

Unauthenticated Cross Site Scripting (XSS) vulnerability in WP Multilang versions up to 2.4.31. An attacker can inject a malicious script that executes in the victim's browser.

Risk Assessment

Potential session theft, account takeover, or malware distribution.

Recommendation

Update WP Multilang to a version that includes the fix.

Original NVD description (English source)

Unauthenticated Cross Site Scripting (XSS) in WP Multilang <= 2.4.31 versions.