All 2 CVE vulnerabilities found in GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websites, with AI-generated Chinese analysis, references, and POCs.
Vendor: john-dagelmore
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-49776 | WordPress GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websites plugin <= 2.32.6 - SQL Injection vulnerability CWE-89 | 9.3 | Critical | 2026-06-15 |
| CVE-2026-9109 | GPTranslate <= 2.31 - Unauthenticated Stored Cross-Site Scripting via REST API Translation Storage CWE-79 | 7.2 | High | 2026-06-13 |
All 2 known CVE vulnerabilities affecting GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websites with full Chinese analysis, references, and POCs where available.