CVE-2026-107419: Missing Authorization in Cool Plugins AI Translation for Polylang

The vulnerability identified as CVE-2026-107419 affects the Cool Plugins AI Translation for Polylang plugin, specifically versions from initial release through 1.6.2. It is a missing authorization issue where access control security levels are incorrectly configured, allowing an attacker with limited privileges to perform unauthorized actions. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality impact, low integrity impact, and low availability impact.

An attacker with low privileges can exploit this missing authorization vulnerability to perform unauthorized actions that may affect the integrity and availability of the system. There is no confidentiality impact reported. The overall impact is considered medium severity.

No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, review and tighten access control configurations for the AI Translation for Polylang plugin to mitigate potential exploitation.