GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websites vulnerabilities

Product

GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websites

by john-dagelmore · last CVE Jun 13, 2026

CVEs

On KEV

7.2

Max CVSS

New 30D

Vulnerabilities1 In the news0 Timeline

Severity mix

Critical 0High 1Medium 0Low 0

Severity

All severities1 Critical0 High1 Medium0 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websites to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-9109	7.2	0%	Jun 13	GPTranslate <= 2.31 - Unauthenticated Stored Cross-Site Scripting via REST API Translation Storage Affected: through 2.31