Vendor

john-dagelmore

3 known vulnerabilities.

Products

GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websites 1 GPTranslate – Multilingual AI Translation Agent for WordPress: Translate Your Site with AI 1 WPSpeed – WordPress Speed, Cache & Performance Optimization (Core Web Vitals, PageSpeed 100) 1

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 6.4

CVE-2026-118784

WPSpeed <= 2.6.10 - Authenticated (Subscriber+) Stored Cross-Site Scripting via User Nickname/Display Name

The WPSpeed plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.6.10 This is due to a combination of two issues in the LightImages HTML optimizer: (1) Dispatcher::runOptimize() decides whether the current requ…

john-dagelmore WPSpeed – WordPress Speed, Cache & Performance Optimization (Core Web Vitals, PageSpeed 100) Web / CMS

Nov 7, 2026
Medium 5.3

CVE-2026-89278

GPTranslate <= 2.34.6 - Unauthenticated Sensitive Information Exposure in Public Frontend Inline Script

The GPTranslate – Multilingual AI Translation Agent for WordPress: Translate Your Site with AI plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.34.6 via the enqueue_frontend_scripts. This makes it po…

john-dagelmore GPTranslate – Multilingual AI Translation Agent for WordPress: Translate Your Site with AI Web / CMS

Sep 18, 2026