CVE-2026-96575

Published 3 October 2026 · tracked since 3 October 2026

Description

The Transliterator – Multilingual and Multi-script Text Conversion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Predictable {rstr_keep} Placeholder in all versions up to, and including, 2.5.8 due to insufficient input sanitization and output escaping. Thi

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-94505 HIGH 8.1
• CVE-2026-96267 HIGH 7.5
• CVE-2026-75028 HIGH 7.5
• CVE-2026-87115 CRITICAL 9.1
• CVE-2026-93889 HIGH 7.2
• CVE-2026-18443 HIGH 8.8
• CVE-2026-100157 MEDIUM 6.5
• CVE-2026-97341 HIGH 7.2
• CVE-2026-96650 HIGH 7.2
• CVE-2026-97337 HIGH 7.5

→ Open the live CVE board · all tools