CVE Catalog
CVE-2026-39732
CriticalCVSS 9.3Exploitation Probability (EPSS)
Low risk0.32%
25th percentile - higher than 25% of all known CVEs
Summary
The Transliterator WordPress plugin in versions up to 2.5.13 contains an unauthenticated SQL Injection vulnerability.
Risk Assessment
An unauthenticated attacker could execute arbitrary SQL queries, potentially leading to data disclosure, modification, or deletion.
Recommendation
Update the Transliterator plugin to a version newer than 2.5.13 or disable it if no update is available.
Other vulnerabilities in Transliterator
Original NVD description (English source)
Unauthenticated SQL Injection in Transliterator <= 2.5.13 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS