Cross-site Scripting Vulnerability in Translate This Plugin by WordPress

CVE-2025-58880

What is CVE-2025-58880?

The Translate This gTranslate Shortcode plugin for WordPress has a Cross-site Scripting (XSS) vulnerability stemming from improper input neutralization during web page generation. This flaw can result in stored XSS, allowing attackers to inject malicious scripts into web pages viewed by users. It impacts versions ranging from n/a through 1.0, posing a significant security risk for websites using this plugin. Proper mitigation strategies should be implemented to protect user data and maintain site integrity.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References