Input validation vulnerability in Translate Multilingual sites – TranslatePress 2.9.6

The TranslatePress plugin used on WordPress websites has a security issue called “PHP Object Injection” in versions up to 2.9.6. This means that someone with administrator-level access or higher can inject harmful code into the plugin. There is currently no known way to exploit this, but if the website has other plugins or themes that can be used in combination, it could lead to serious problems like deleting files, accessing private information, or running code.