CVE-2022-38974: Wpml

Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days.

Broken Access Control vulnerability in WPML Multilingual CMS premium plugin <= 4.5.10 on WordPress allows users with subscriber or higher user roles to change the status of the translation jobs.

Affected products

• Wpml Wpml: up to and including 4.5.10

Published 2022-11-18. Last modified 2026-06-17.