Multilingual plugins store translated text and insert it into front-end output across themes and other plugins. Visual editing, language routing, and automatic translation features require firm access controls and consistent escaping. TranslatePress – Translate Multilingual sites with AI Translation version 3.2.6 has successfully completed the CleanTalk Plugin Security Certification process and received PSC-2026-64679, confirming that the plugin was reviewed from a secure code perspective with attention to translation storage, visual editor permissions, multilingual routing, automatic translation settings, and public output.
| Name of | TranslatePress – Translate Multilingual sites with AI Translation |
| Version | 3.2.6 |
| Active installations | 400,000+ |
| Description | Adds visual front-end translation, multilingual URLs, and optional automatic translation for WordPress content. |
| Security | Successfully tested for: SQL Injection (SQLi) Cross-Site Scripting (XSS) – Stored and Reflected Cross-Site Request Forgery (CSRF) Authentication Vulnerabilities Authentication Bypass Exploits Privilege Escalation Buffer Overflow Denial-of-Service (DoS) vectors Data Leakage Vulnerabilities Insecure Dependency Usage Remote Code Execution (RCE) Risks Unauthorized File Access Insufficient Injection Protection Information Disclosure via Misconfigured Endpoints |
| CleanTalk Certification | Proudly earned the “Plugin Security Certification” (PSC) from CleanTalk, indicating adherence to stringent security standards. |
| Additional Information | Use TranslatePress – Translate Multilingual sites with AI Translation with confidence backed by the “Plugin Security Certification” (PSC). Protect translation service credentials, restrict editor access, and verify translated output after theme or plugin changes. |
| Plugin Security Certification by CleanTalk |  |
| Logo of the plugin |  |
PSC by CleantalkJoin the community of developers who prioritize security. Highlight your plugin in the WordPress catalog.
Key Features
TranslatePress – Translate Multilingual sites with AI Translation lets administrators translate a WordPress site from a visual front-end interface. It stores translated strings, supports multilingual navigation, and can use automatic translation before manual refinement. The plugin works across theme and plugin output, which means language selection, translated values, editor requests, and public URLs interact with many parts of the site.
Security Assurance
The CleanTalk Plugin Security Certification evaluation examined permissions for the visual translation editor, validation of stored translated strings, escaping during front-end replacement, and protection of automatic translation settings. The review also considered language routing, request handling, credential exposure, and the boundary between public language selection and privileged translation management.
The plugin has been successfully tested for:
✅ Information Leakage Vulnerabilities
✅ SQL Injection Vulnerabilities
✅ Cross-Site Scripting (XSS) Attacks
✅ Cross-Site Request Forgery (CSRF) Attacks
✅ Authentication and Authentication Bypass Vulnerabilities
✅ Privilege Escalation Vulnerabilities
✅ Buffer Overflow Vulnerabilities
✅ Denial-of-Service (DoS) Vulnerabilities
✅ Data Leakage Vulnerabilities
✅ Insecure Dependencies
✅ Code Execution Vulnerabilities
✅ File Unauthorized Access Vulnerabilities
✅ Insufficient Injection Protection
Conclusion
With PSC-2026-64679, TranslatePress – Translate Multilingual sites with AI Translation version 3.2.6 demonstrates strong baseline security for multilingual editing and public translation delivery. The certification covers stored translation data, editor permissions, language-aware routing, and front-end output across integrated components. Administrators should safeguard external service credentials and review translated pages after major theme, plugin, or routing changes.
Note: The date and certification information may change over time. It is advisable to verify the latest details on the plugin developer’s website.
