by Kastro
Paper/Archive/CVE-2026-49776

CVE-2026-49776

JExtensions Store GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websites — WordPress GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websites plugin <= 2.32.6 - SQL Injection vulnerability

EPSS 0.3%CVSS 9.3
critical.is priorityof 100
32
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 21.5.215 × 204.3No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Unauthenticated SQL Injection in GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websites <= 2.32.6 versions.

Affected

ProductAffectedFixed inSource
GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websitesn/a – 2.32.6–CNA

Scores by source

Patchstack (CNA)9.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

refpatchstack.com/database/wordpress/plugin/gptranslate/vulnerability/wordpress-gptranslate-multilingual-ai-translation-for-wordpress-automatically-translate-websites-plugin-2-32-6-sql-injection-vulnerability?_s_id=cve