Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Tools/GitHubGitHub/deadexpl0it/cve-2026-19632-poc
Vulnerability AnalysisExploitationWeb Application ExploitationWeb SecurityPenetration Testing
GitHubdeadexpl0it/cve-2026-19632-poc

CVE-2026-19632-POC

PoC for CVE-2026-19632 - TranslatePress – Multilingual <= 3.3.1 - Unauthenticated Account Takeover via Password Reset Link Disclosure

View Repository
21h 12m agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2026-19632 — TranslatePress Unauthenticated Account Takeover

Unauthenticated Account Takeover via Password Reset Link Disclosure

💙 Support the Project

If you appreciate my work, consider supporting the project via USDT (TRC20): TQBA72kakjCZLnJt8fJYcD7dyQCEpzNtVN

🎥 Video Demonstration

A complete video walkthrough and demonstration of the script is available here:

▶️ Watch the video on YouTube

⚠️ Overview

CVE-2026-19632 is a critical unauthenticated account takeover vulnerability affecting the TranslatePress – Multilingual WordPress plugin.

root@kitploit:~
## 🚀 Usage

Create a `list.txt` file containing one target per line:

```text
https://target1.example
https://target2.example
https://target3.example

Run:

root@kitploit:~
python3 CVE-2026-19632.py

The tool will prompt:

root@kitploit:~
[?] targets file (list.txt):

Enter:

root@kitploit:~
list.txt

Then:

root@kitploit:~
[?] concurrency (5):

Press Enter to use the default concurrency of 5.

Example

root@kitploit:~
$ python3 CVE-2026-19632.py

[?] targets file (list.txt): list.txt
[+] 3 targets loaded
[?] concurrency (5): 5

[*] https://target1.example
    nonce: xxxxxxxxxxxx... langs: en_US,fr_FR default: en_US
    users: admin

[1/3] TAKEOVER:0 VULN:1 SAFE:0 ERROR:0

Result Status

root@kitploit:~
TAKEOVER   Takeover stage reached
VULN       Vulnerable condition detected
SAFE       Target did not match the vulnerable conditions
ERROR      An error occurred while processing the target

The tool uses:

root@kitploit:~
list.txt    Target list
users.txt   Discovered users
shells.txt  Shell-related results

⚠️ For authorized security research and testing only.

root@kitploit:~

📚 References CVE Record: https://www.cve.org/CVERecord?id=CVE-2026-19632 Wordfence Advisory: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/translatepress-multilingual/translatepress-multilingual-331-unauthenticated-account-takeover-via-password-reset-link-disclosure TranslatePress: https://wordpress.org/plugins/translatepress-multilingual/ ⚖️ Disclaimer

This project is provided for security research, vulnerability analysis, defensive testing, and authorized penetration testing.

Do not use this research against systems without explicit authorization.

The author is not responsible for misuse or damage caused by this material.

root@kitploit:~
TranslatePress <= 3.3.1
Download Tool