CVE

CVE-2025-3488 — WPML Multilingual CMS 3.6.0 - 4.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpml_language_switcher Shortcode

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2025-3488 WPML Multilingual CMS 3.6.0 - 4.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpml_language_switcher Shortcode Unknown < 4.7.4 4.7.4

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.