The TranslatePress plugin contains a critical vulnerability that allows unauthenticated attackers to perform a full administrator account takeover by exposing sensitive password-reset information.

The trp_get_translations_regular AJAX action fails to properly restrict access, allowing unauthenticated attackers to extract administrator password-reset URLs and tokens. This occurs when automatic string saving is enabled and the administrator's profile uses a secondary language.

With a CVSS score of 9.8, this flaw poses a severe threat to site integrity. Successful exploitation allows for complete administrator account takeover, granting attackers full control over the WordPress installation, leading to data exfiltration and potential site-wide malware distribution.

Immediate Action: Update to the latest version if available, or disable the plugin immediately if no patch is accessible, to prevent the exposure of sensitive password-reset strings.

Proactive Monitoring: Review database logs for unauthorized access to the translation dictionary tables and monitor for unexpected password-reset requests or administrative account changes.

Compensating Controls: Disable automatic string saving within the plugin settings if the plugin cannot be immediately removed, and employ a WAF to filter requests to the trp_get_translations_regular endpoint.

Public Exploit Available: Unknown

This vulnerability is critical because it directly facilitates total account takeover. Organizations using TranslatePress should verify if their configuration makes them vulnerable and take immediate action, such as disabling the plugin or restricting access to the affected AJAX functionality, until a verified security update is applied.