Translate WordPress with Weglot 2.0 – Multilingual AI Translation
Translate WordPress with Weglot 2.0 – Multilingual AI Translation has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2026; all 3 are fixed as of October 2026. Their average CVSS score is 6.3, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is Cross-Site Scripting, behind 2 of the records (67%). Other recurring categories include Missing Authorization.
Every one of the 3 issues recorded for Translate WordPress with Weglot 2.0 – Multilingual AI Translation has a vendor fix available, so running the current release closes all known holes.
3 independent researchers contributed these findings, one record each. Translate WordPress with Weglot 2.0 – Multilingual AI Translation is installed on roughly 50,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
CVE-2026-88784Weglot <= 6.4.2 - Unauthenticated Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Translate WordPress with Weglot 2.0 – Multilingual AI Translation
Author
Weglot Translate Team
Weglot 2.0 is a website translation plugin that translates your WordPress site into 110+ languages, with AI translations built around your brand. Trusted by 110,000+ websites, Weglot detects and translates all of your content, from pages and posts to WooCommerce products, emails, and the text inside your images, then gives you full control to review and publish every translation. Weglot installs in 5 minutes, with no coding required. What’s New in Weglot 2.0 Weglot 2.0 builds on the Weglot you know, with even better translations tailored to your brand that you can trust and publish: a new AI Translation Model, a redesigned translation experience, and built-in multilingual visibility. A new AI Translation Model shaped by your Brand Profile and Translation Guidelines, for more accurate, context-aware translations that sound like you. A redesigned translation experience with a new dashboard, publishing workflow, Visual Editor, and Translation List. Image Translation to localize text inside your images directly from the Visual Editor. Weglot MCP to connect Weglot to your favorite AI assistant and update translations without opening the dashboard. Built-in multilingual visibility with multilingual SEO and GEO foundations: automatic hreflang tags, translated metadata, and publish or unpublish per language. New collaboration and analytics tools, including a dedicated Agency Workflow. AI Translation Built Around Your Brand Weglot’s AI Translation Model combines leading AI models with your Brand Profile, Translation Guidelines, and page context. Your translated content reads like your brand in every language, so you can publish with confidence. AI Translation Model shaped by your Brand Profile and Translation Guidelines for accurate, consistent translations. In-context review in the Visual Editor: read and edit each translation on a live preview of your website. Translation List to search, filter, and manage every translation from one place. Full editing control: keep the AI translation, edit it yourself, or hand it to your team or your translators. 110+ languages available, including regional variants. Publishing workflow to control what gets translated and when each language goes live. Automatic content synchronization: when you publish new content, Weglot detects it and translates it, so your multilingual website stays up to date. Multilingual SEO and GEO for WordPress Weglot handles the technical foundations of multilingual SEO, so every translated page is ready to be discovered by search engines and by AI-powered answer engines. Language-specific URLs: subdirectories such as /es/ or /fr/, or subdomains, so each language is indexed separately. Automatic hreflang tags to tell search engines which language version to serve to which audience. Translated metadata, including page titles, meta descriptions, and translated slugs. Publish and unpublish per language to control exactly what is live in each market. Pages ready for indexing across search engines and AI-powered discovery experiences, in every market you localize for. Compatible with your SEO plugins, including Yoast SEO, Rank Math, and All in One SEO. Image Translation and Weglot MCP Not everything that needs translating is text on a page, and not every translation job starts in the dashboard. Image Translation: translate the text inside your images in one click from the Visual Editor while preserving the original design. Generate the translated image with AI or import your own. Weglot MCP: connect Weglot to your favorite AI assistant to review translations, manage projects, and update content using natural language. WooCommerce Translation Features Translate and localize your entire WooCommerce store, so shoppers buy in their own language: Product descriptions, categories, and attributes. Cart, checkout, and account pages. Customer emails in the shopper’s own language. WooCommerce-specific metadata and taxonomies. Built for Teams and Agencies Weglot 2.0 adds the tooling teams and agencies need to run multilingual projects at scale. Agency Workflow to manage client websites and multilingual projects in one place. Word Count for clear visibility into how much content you translate. Team collaboration to invite members and assign translation work. Pro plans unlock unlimited languages, higher word counts, advanced multilingual SEO, multisite support, and priority support. Why Teams Choose Weglot Weglot’s AI Translation Model works from your brand, your guidelines, and your audience, because a good translation is one that fits the company it belongs to. Weglot 2.0 detects all of your content automatically, whether you run a blog, a marketing site, or a WooCommerce store, so you never duplicate pages or maintain PO files by hand. Your translations are served from the cloud, which keeps your database light and your WordPress site fast as you add languages and markets. Proven Global Results The Bradery: scaled their fashion ecommerce store to 500+ daily product translations while keeping their catalogue consistent in every language. The biggest win for us is the time we’ve saved. It takes us about ten minutes twice a week to double-check everything is running how we want it. Everything else is done by Weglot. Adèle Aubry, Ecommerce Manager at The Bradery REVIEWS.io: achieved a 120% increase in German traffic and a 20% conversion boost after localizing their website with Weglot. We needed a product that dramatically increased the speed of website translation. Our clunky manual coding approach was time-consuming, but with Weglot, it’s fast and effortless. Rich Ball, Marketing Manager, REVIEWS.io Ron Dorff: now generates 70% of their revenue from international markets with a fully localized customer experience. Weglot interface is really friendly and easy to use. You can find all your content in a few clicks and then translate it quickly and efficiently. Jamila Halloum, Digital Marketing Director at Ron Dorff. Get Started Install the plugin from your WordPress dashboard, connect your Weglot account, and select the languages you want. Weglot translates your website and puts every translation in front of you to review before you publish. Create your free account: https://auth.weglot.com/register/wordpress?utm_source=wordpress.org&utm_medium=plugin-directory&utm_campaign=readme Important Links https://www.weglot.com/ https://www.weglot.com/terms https://www.weglot.com/security By using this plugin, you agree to Weglot’s terms and policies. Please review these documents to understand how your data and content are managed and protected. If you decide to stop using Weglot, your website will no longer be translated. All translations are stored on Weglot’s servers. However, you can export all your translations using our import/export feature before discontinuing the service to save your translations. More details on how to do this can be found here: https://support.weglot.com/article/206-can-i-export-my-translations. If you do not have access to this feature, you can request support from Weglot to assist with the export before you leave.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C