Language Switcher for Transposh
Language Switcher for Transposh has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Language Switcher for Transposh has a vendor fix available, so running the current release closes it.
All of these findings were reported by Majed Refaea. Language Switcher for Transposh is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2024-32695Language Switcher for Transposh <= 1.5.9 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records

Language Switcher for Transposh
Author
codingfix
IMPORTANT: READ BEFORE INSTALLING Language Switcher for Transposh (LSfT) is not a translation engine. It is an advanced styling and integration tool that provides a beautiful, customizable interface for the Transposh Translation Filter plugin. LSfT REQUIRES TRANSPOSH TO WORK. It will not translate your content on its own and cannot be activated unless Transposh is already installed and active. How to get started: 1. First: Download, install, and activate Transposh Translation Filter. Configure your languages in the Transposh settings. 2. Second: Install and activate Language Switcher for Transposh. You can now choose how to display your flags and language names. Main Features: * Integrated CSS Editor (New in 2.0): Customize the switcher’s appearance directly from the admin panel with a professional code editor (CodeMirror). * Safe Customization: Experiment with confidence! If something goes wrong with your custom styles, you can always restore the original plugin stylesheet with a single click. * Fast & Smart Loading: Your custom styles are saved in the database for maximum performance, while keeping the original files untouched as a secure backup. * Flexbox Powered: Modernized layout for perfect vertical and horizontal alignment in any theme. * Automode: Automatically inject the switcher into your primary or selected WordPress menu. * Shortcodes & Widgets: Full support for Shortcodes and Legacy Widgets, compatible with Classic and Block-based themes. * Admin Tools: Adds an “Edit Translation” button for authorized roles (Admin, Author, Editor) to quickly toggle the Transposh Editor. Switcher Types The version 2.0.0 provides 10 distinct switcher styles: 1. Horizontal: Flags only or Code only. 2. Vertical: Flags only ir Code only. 3. Dropdown (Custom JS): Flags only, Text only, Code only or Flags and Text. 4. Native Select: Lightweight browser-native dropdown: Code only or Text only.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C