john-dagelmore
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| GPTranslate – Multilingual AI Translation Agent for WordPress: Translate Your Site with AI | 1 | – | Sep 18, 2026 |
| GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websites | 1 | – | Jun 13, 2026 |
| WPSpeed – WordPress Speed, Cache & Performance Optimization (Core Web Vitals, PageSpeed 100) | 1 | – | Nov 7, 2026 |
Exploited and recent CVEs
- CVE-2026-118784 WPSpeed <= 2.6.10 - Authenticated (Subscriber+) Stored Cross-Site Scripting via User Nickname/Display Name –
- CVE-2026-89278 GPTranslate <= 2.34.6 - Unauthenticated Sensitive Information Exposure in Public Frontend Inline Script 0.4%
- CVE-2026-9109 GPTranslate <= 2.31 - Unauthenticated Stored Cross-Site Scripting via REST API Translation Storage 0.3%