The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to a stored Cross‑Site Scripting flaw (CWE‑79). In unapproved comment entries, the plugin fails to sanitize the 'comment' field before rendering it, allowing an attacker to embed malicious scripts. When an approved comment containing such content is displayed on a page, the script runs in the visitor’s browser with the site's privileges, potentially exfiltrating session data, defacing content, or redirecting users to phishing sites.

Any WordPress site running TranslatePress version 3.3.8 or older and that has the secondary language feature enabled is affected. The vulnerability requires that an attacker first submit a comment with a name and email that matches a previously approved comment under WordPress's default comment_previously_approved setting; once that comment is approved, the stored XSS is executed each time the page renders. Sites that have installed the plugin for multilingual content delivery and enable secondary languages fall under this risk scope.

With a CVSS score of 7.2 the vulnerability falls into the moderate‑to‑high category. The absence of an EPSS score does not lower the threat; exploitation is simple: no authentication is needed, only a matching, approved comment coupled with an active secondary language. Since the exploit step is low complexity and the plugin is widely used, the probability of attack remains significant despite its current exclusion from the CISA KEV catalog.