medium4.3
CVE-2026-14549
The Ray Enterprise Translation WordPress plugin through 1.7.3 does not perform any capability or nonce checks on one of its AJAX actions, allowing any authenti…
Impact
The Ray Enterprise Translation WordPress plugin through 1.7.3 does not perform any capability or nonce checks on one of its AJAX actions, allowing any authenticated user, including Subscribers, to add or delete the site's configured languages.
Affected products
| Product | Affected versions |
|---|---|
| Ray Enterprise Translation WordPress Plugin | through 1.7.3 |
Versions were read from the advisory text. No structured product data has been published for this record yet.