WordPress Site Owners using the popular Loco Translate plugin should update immediately. On July 15, 2026, Wordfence disclosed CVE-2026-15005, a high severity vulnerability with a CVSS score of 8.8. The flaw affects every Loco Translate release up to and including version 2.8.5. The issue combines a Cross-Site Request Forgery (CSRF) weakness with Remote Code Execution…