What the TranslatePress Account Takeover Flaw Teaches WordPress Site Owners About Credential Safety
What happened with TranslatePress In August 2026, the security team at Wordfence disclosed an unauthenticated account takeover flaw in TranslatePress, the multilingual plugin with more than 400,000 active installations. A researcher using the handle momopon1415 (Yuto Hyakumoto) submitted the issue through the Wordfence Bug Bounty Program on August 11, 2026. The vendor, Cozmoslabs, acknowledged the […]