What the vulnerability does
01Description
The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.1 via the 'trp_get_translations_regular' AJAX action. This makes it possible for unauthenticated attackers to extract the raw administrator password-reset URL — including the plaintext reset key and login parameters stored in the translation dictionary table — enabling full administrator account takeover. This vulnerability is only exploitable when automatic string saving is enabled (the default setting) and the target administrator's profile locale is set to a published secondary language, as these conditions cause the password-reset URL to be persisted as a translatable string in the secondary-language dictionary table.
Explanation of Vulnerability in Simple Terms
02Summary
TranslatePress versions up to 3.3.1 contain a weak password recovery mechanism that allows attackers to reset user passwords without proper verification. An attacker can gain unauthorized access to WordPress sites by exploiting predictable or bypassable password reset tokens. No authentication or user interaction is required to exploit this vulnerability.
What an attacker can do
03Attacker Capabilities
Reset any user's password and gain full access to the WordPress site.
Potential impact on your site
04Site Impact
Attackers can take over admin accounts and compromise your entire WordPress installation.
Conditions required to exploit
05Prerequisites
Network access only; no authentication or user interaction required.
Key dates
06Disclosure timeline
August 26, 2026
CVE published
August 26, 2026
Record updated
