plugin

Gptranslate Vulnerabilities

2 known security issues reported for the Gptranslate WordPress plugin. Most recent disclosed Jun 12, 2026.

2 high

Running Gptranslate on your site? Check whether your installed version is affected.

Scan your site free

GPTranslate <= 2.31 - Unauthenticated Stored Cross-Site Scripting via REST API Translation Storage

high

The GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API Translation Storage in all versions up to, and including, 2.31 due to insufficient input sanitization and output escaping. This makes it possible f...

CVSS:
7.2
Affected:
up to 2.31
Fixed in:
2.32
Disclosed:
Jun 12, 2026

CVE-2026-9109 on NVD →

GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websites <= 2.32.6 - Unauthenticated SQL Injection

high

The GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websites plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 2.32.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes...

CVSS:
7.5
Affected:
up to 2.32.6
Fixed in:
2.32.7
Disclosed:
Jun 4, 2026

CVE-2026-49776 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database