medium6.5
CVE-2026-14548
The Ray Enterprise Translation WordPress plugin through 1.7.3 does not perform any capability or nonce checks on one of its AJAX actions, allowing any authenti…
Impact
The Ray Enterprise Translation WordPress plugin through 1.7.3 does not perform any capability or nonce checks on one of its AJAX actions, allowing any authenticated user, including Subscribers, to overwrite the administrator-configured translation API token with an arbitrary value.
Affected products
| Product | Affected versions |
|---|---|
| Ray Enterprise Translation WordPress Plugin | through 1.7.3 |
Versions were read from the advisory text. No structured product data has been published for this record yet.