Read the docs

smartcatai

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

smartcatai records in CISA KEV

No smartcatai vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-04078 CVE-2026-4683 · GHSA-3rhq-g36f-cvc7

Smartcat Translator for WPML <= 3.1.77 - Missing Authorization to Unauthenticated Plugin Settings Update

Priority LOW 34

The Smartcat Translator for WPML plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'routeData' REST endpoint in all versions up to, and including, 3.1.77.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00262 Published 2026-05-15 No fix listed CWE-862
TI-2025-08660 CVE-2025-9451 · GHSA-hmr2-qrjx-xqh4

Smartcat Translator for WPML <= 3.1.72 - Authenticated (Author+) SQL Injection via orderby Parameter

Priority LOW 29

The Smartcat Translator for WPML plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’ parameter in all versions up to, and including, 3.1.72 due to insufficient escaping on the user supplied p…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00315 Published 2025-09-11 No fix listed CWE-89
Open these records in search →