Smartcat Translator for WPML
Smartcat Translator for WPML has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; all 2 are fixed as of September 2026. Their average CVSS score is 6.5, and the most serious one scores 6.5 out of 10.
The most common weakness is Missing Authorization, behind 1 of the records (50%). Other recurring categories include SQL Injection.
Every one of the 2 issues recorded for Smartcat Translator for WPML has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. Smartcat Translator for WPML is installed on roughly 60 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2026-4683Smartcat Translator for WPML <= 3.1.77 - Missing Authorization to Unauthenticated Plugin Settings Update
Read the full analysisVulnerability Records
Smartcat Translator for WPML
Author
smartcatai
Smartcat connects linguists, companies, and agencies to streamline the translation of any content into any language, on demand. Our platform puts your translation process on autopilot, from content creation to payments. The plugin allows you to set up an integration between your WPML-enabled WordPress site and Smartcat. The integration itself is configured in Smartcat. Once configured, it will automatically pull translatable content from your website to Smartcat, where you can translate it with your own linguists or the ones you pick from our Marketplace. Alternatively, you can use the power of machine translation and post-edit just the most important pages to reduce translation costs. Once your content is translated, Smartcat will push it back to WordPress, instantly publishable in the target language(s) of choice. Account & pricing You first need to create a Smartcat account as one is not automatically created when installing the extension. To create an account, go to smartcat.com. All translation features in Smartcat are free to use. Features Connect your WordPress website with a specific Smartcat account Choose the translation supplier from your own team or Smartcat Marketplace Automatically send new or updated content for translation Reuse existing translations thanks to Translation Memory Choose translation workflow stages — translation, editing, proofreading, etc. Benefits of Smartcat No document re-formatting required Easy-to-use multilingual translation editor Multi-stage translation process — e.g., translation, editing, proofreading Free collaboration with your own volunteers or coworkers Marketplace of 350,000+ translators and 2,000+ agencies in 100+ language pairs Track progress by language, document, or person Automated payments to translation suppliers Free support to optimize localization processes Support Contact us at support@smartcat.com with any questions related to: Module issues Assistance in vendor management (freelancers or LSPs) Use of the module for your clients needs
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C