Skip to content
OpenAdvisories
Critical · 9.3 CVE-2026-49776 EUVD-2026-36896GHSA-2f68-qpff-692q

WordPress GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websites plugin <= 2.32.6 - SQL Injection vulnerability

Published Jun 15, 2026 · Updated Jun 16, 2026 · Assigned by Patchstack

Vendor: JExtensions Store Product: GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websites Category: Web / CMS

Description

Unauthenticated SQL Injection in GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websites <= 2.32.6 versions.

Affected products

VendorProductAffectedFixed
JExtensions Store GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websites ≤ 2.32.6 —

References