WordPress TranslatePress Plugin Sensitive Info Exposure

The TranslatePress plugin for WordPress is vulnerable to Sensitive Information Exposure.

TranslatePress stores administrator password-reset URLs in a translatable string table, allowing unauthenticated attackers to extract them and take over administrator accounts.

This vulnerability is exploitable when automatic string saving is enabled and the administrator's profile locale is set to a published secondary language.