VULNERABILITY INTELLIGENCE
CVE-2026-14549
CVSS score4.3 MEDIUM
EPSS probability0.25%
CISA KEVNot currently listed
Published2026-08-11
Last modified2026-08-26
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Description
The Ray Enterprise Translation WordPress plugin through 1.7.3 does not perform any capability or nonce checks on one of its AJAX actions, allowing any authenticated user, including Subscribers, to add or delete the site's configured languages.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-862