CVE-2026-49776

CriticalCVSS 9.3

Published: 15/06/2026(UTC)Updated: 15/06/2026(UTC)Translated: 16/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.29%

20th percentile — higher than 20% of all known CVEs

Summary

The GPTranslate plugin in versions up to 2.32.6 has a vulnerability to unauthenticated SQL Injection, allowing malicious queries to be executed against the database.

Risk Assessment

An attacker could gain access to sensitive data in the database, potentially leading to information leakage or system compromise.

Recommendation

It is recommended to update the GPTranslate plugin to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Unauthenticated SQL Injection in GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websites <= 2.32.6 versions.