Recently, the development team of the WPML (WordPress Multilingual) plugin team was notified and revealed the top-level detail, of an issue that allows unauthorized access to some WPML internal features such as those used for configuration of translation jobs and changing plugin settings.
It’s important to note that this vulnerability is only accessible to registered site users, not just any site visitor. However, we always recommend updating to the latest version of WPML and keeping your site’s theme and plugins up to date to keep your site secure.
This update also includes a fix for an issue that could lead to a fatal error when WPML Media Translation is enabled and you are saving posts with big amounts of anchor HTML tags.
We strongly advise that you update to the latest versions of both WPML and its related plugins, in order to keep your site secure. For more information on this issue, please visit the WordPress Security blog.