CVE-2026-49776

CRITICAL CVSS: 9.3 Published: 2026-06-15 Modified: 2026-06-17

Description

Unauthenticated SQL Injection in GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websites <= 2.32.6 versions.

Affected Platforms

Unknown

Weakness Type

CWE-89

References

https://patchstack.com/database/wordpress/plugin/gptranslate/vulnerability/wordp…