The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress contains an unauthenticated Stored Cross‑Site Scripting flaw in all releases up to and including version 3.2.5. The plugin’s translation rendering routine unconditionally replaces the special gettext markers '#!trpst#' and '#!trpen#' with the characters '<' and '>', respectively. Because these markers survive WordPress’s content filtering, an attacker can embed them into user‑generated content such as a comment. When a visitor views the translated page in a secondary language, the markers are converted into real HTML tags; an attacker can thus create a malicious tag such as <img onerror=…> that executes arbitrary JavaScript in the user's browser.

The TranslatePress – Translate Multilingual sites with AI Translation plugin, developed by cozmoslabs, is vulnerable on any WordPress site that has the plugin installed and is running a version 3.2.5 or earlier. Site owners need to determine the plugin version in use and verify whether the vulnerable marker sequences are present in their content or translations.

The vulnerability has a CVSS score of 7.2 and an EPSS probability of less than 1 %. It is not listed in the CISA KEV catalog. Because the flaw is unauthenticated and requires only the insertion of the marker strings into user‑generated content, it is potentially exploitable by a wide range of attackers. The impact is limited to site visitors who view the affected pages, but the stored nature of the payload allows the malicious script to run for any subsequent visitor, enabling phishing, credential theft, or defacement.