Unknown Loco Translate

• CVE-2026-94239 Medium 6.8 Loco Translate < 2.8.9 - Translator+ Stored XSS via Bundle Configuration 0.2%
• CVE-2026-94238 Medium 6.8 Loco Translate < 2.8.9 - Translator+ Limited File Read via 'path' Parameter 0.3%
• CVE-2022-0765 Unrated Loco Translate < 2.6.1 - Authenticated Stored Cross-Site Scripting 3.8%
• CVE-2021-24721 Unrated Loco Translate < 2.5.4 - Authenticated PHP Code Injection 0.9%