Vulnerabilities / GPTranslate
GPTranslate vulnerabilities
Advisories WPSec published for GPTranslate – Multilingual AI Translation Agent for WordPress: Translate Your Site with AI. Other sources may list more. Its attack surface: GPTranslate on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-07 | WPSEC-2026-0595 | GPTranslate <= 2.34.13 - Unauthenticated Cross-Site Scripting via HTML Attribute Values in Server-Side Translated Pages | Medium 6.1 | 2.34.14 |
| 2026-10-03 | WPSEC-2026-0405 | GPTranslate <= 2.34.12 - Unauthenticated Stored Cross-Site Scripting via Translated Attributes in the DOMDocument Rendering Method | Medium 5.4 | 2.34.13 |
| 2026-10-01 | WPSEC-2026-0176 | GPTranslate <= 2.34.11 - Unauthenticated Stored Cross-Site Scripting via Translated Image, Iframe and Video Attributes | Medium 5.4 | 2.34.12 |
| 2026-10-01 | WPSEC-2026-0139 | GPTranslate <= 2.34.10 - Unauthenticated Stored Cross-Site Scripting via Translation Values | High 7.2 | 2.34.11 |
License: CC BY 4.0