CVE-2026-14549 — Ray Enterprise Translation <= 1.7.3 - Subscriber+ Language Addition and Deletion
The Ray Enterprise Translation WordPress plugin through 1.7.3 does not perform any capability or nonce checks on one of its AJAX actions, allowing any authenticated user, includ…
Published: 2026-08-11 · CVSS: 4.3 · CVSS 3.1
The Ray Enterprise Translation WordPress plugin through 1.7.3 does not perform any capability or nonce checks on one of its AJAX actions, allowing any authenticated user, including Subscribers, to add or delete the site's configured languages.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7