WTranslator Security & Risk Analysis

wordpress.org/plugins/wtranslator

Make your WordPress site multilingual with Google Translate. Visitors can read your content in their preferred language.

10 active installs v1.0.0 PHP + WP 5.0+ Updated Apr 11, 2026
google-translateinternationalizationlanguagemultilingualtranslation
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is WTranslator Safe to Use in 2026?

Generally Safe

Score 100/100

WTranslator has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago
Risk Assessment

The "wtranslator" v1.0.0 plugin exhibits a strong security posture based on the provided static analysis and vulnerability history. The plugin demonstrates excellent adherence to secure coding practices, with all identified SQL queries utilizing prepared statements and a very high percentage of output being properly escaped. Crucially, there are no identified dangerous functions, file operations, or external HTTP requests, significantly reducing the attack surface. The presence of nonce and capability checks on all AJAX handlers further strengthens its defenses against common WordPress vulnerabilities. The complete absence of known CVEs and a clean vulnerability history suggest a well-maintained and secure plugin. Overall, "wtranslator" v1.0.0 presents a very low security risk to WordPress installations.

Vulnerabilities
None known

WTranslator Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

WTranslator Release Timeline

v1.0.0Current
Code Analysis
Analyzed Apr 16, 2026

WTranslator Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
14 prepared
Unescaped Output
6
188 escaped
Nonce Checks
6
Capability Checks
7
File Operations
0
External Requests
0
Bundled Libraries
0

SQL Query Safety

100% prepared14 total queries

Output Escaping

97% escaped194 total outputs
Data Flows · Security
All sanitized

Data Flow Analysis

4 flows
save_settings (includes/class-admin-settings.php:330)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

WTranslator Attack Surface

Entry Points6
Unprotected0

AJAX Handlers 6

authwp_ajax_wtranslator_detect_ipwtranslator.php:105
noprivwp_ajax_wtranslator_detect_ipwtranslator.php:106
authwp_ajax_wtranslator_translatewtranslator.php:165
noprivwp_ajax_wtranslator_translatewtranslator.php:166
authwp_ajax_wtranslator_clear_cachewtranslator.php:167
authwp_ajax_wtranslator_save_settingswtranslator.php:168
WordPress Hooks 44
actioninitwtranslator.php:80
actionwp_footerwtranslator.php:81
actionshutdownwtranslator.php:82
actionshutdownwtranslator.php:83
actionplugins_loadedwtranslator.php:86
actionadmin_menuwtranslator.php:89
actionadmin_initwtranslator.php:90
actionadmin_initwtranslator.php:91
actionadmin_enqueue_scriptswtranslator.php:92
actionadmin_enqueue_scriptswtranslator.php:95
actionwp_enqueue_scriptswtranslator.php:98
filterrank_math/sitemap/cache_modewtranslator.php:101
filterrank_math/sitemap/cache_directorywtranslator.php:102
actionwp_headwtranslator.php:109
filterwpseo_canonicalwtranslator.php:110
filterrank_math/frontend/canonicalwtranslator.php:111
filterwpseo_titlewtranslator.php:115
filterwpseo_metadescwtranslator.php:116
filterrank_math/frontend/titlewtranslator.php:117
filterrank_math/frontend/descriptionwtranslator.php:118
filterdocument_title_partswtranslator.php:119
actionwp_headwtranslator.php:120
filterrank_math/get_meta_descriptionwtranslator.php:123
filterrank_math/head/descriptionwtranslator.php:124
filterrank_math/paper/descriptionwtranslator.php:125
filteraioseo_descriptionwtranslator.php:128
filterseopress_titles_descwtranslator.php:129
actionwp_headwtranslator.php:133
actionwp_headwtranslator.php:134
actiontemplate_redirectwtranslator.php:137
actionwp_enqueue_scriptswtranslator.php:138
actionwp_headwtranslator.php:139
actionwp_headwtranslator.php:140
actionwp_headwtranslator.php:141
filterbody_classwtranslator.php:142
actionupdated_option_wtranslator_settingswtranslator.php:145
actioninitwtranslator.php:148
filterget_post_metadatawtranslator.php:151
actiontemplate_redirectwtranslator.php:162
filterscript_loader_tagwtranslator.php:713
actionwp_footerwtranslator.php:922
filterwp_nav_menu_itemswtranslator.php:928
filterwalker_nav_menu_start_elwtranslator.php:931
actionwp_footerwtranslator.php:936
Maintenance & Trust

WTranslator Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedApr 11, 2026
PHP min version
Downloads43

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

WTranslator Developer Profile

wtranslator

1 plugin · 10 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect WTranslator

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/wtranslator/assets/css/wtranslator-frontend.css/wp-content/plugins/wtranslator/assets/js/wtranslator-frontend.js/wp-content/plugins/wtranslator/assets/js/wtranslator-admin.js/wp-content/plugins/wtranslator/assets/js/wtranslator-admin.css
Script Paths
/wp-content/plugins/wtranslator/assets/js/wtranslator-frontend.js/wp-content/plugins/wtranslator/assets/js/wtranslator-admin.js
Version Parameters
wtranslator/assets/css/wtranslator-frontend.css?ver=wtranslator/assets/js/wtranslator-frontend.js?ver=wtranslator/assets/js/wtranslator-admin.js?ver=wtranslator/assets/js/wtranslator-admin.css?ver=

HTML / DOM Fingerprints

CSS Classes
wtranslator_settings_page
HTML Comments
<!-- WTranslator settings --><!-- WTranslator Widget -->
Data Attributes
data-wtranslator-original-content
JS Globals
window.wtranslator_options
REST Endpoints
/wp-json/wtranslator/v1/detect-ip
FAQ

Frequently Asked Questions about WTranslator