JExtensions Store

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

JExtensions Store records in CISA KEV

No JExtensions Store vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Jchatsocial 1 record LOW

Records

3 records

TI-2026-36685 CVE-2026-49776 · GHSA-2f68-qpff-692q

SQL injection in JExtensions Store GPTranslate – Multilingual AI Translation for…

MEDIUM 46

Unauthenticated SQL Injection in GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websites <= 2.32.6 versions.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00289 Published 2026-06-15 No fix listed CWE-89

TI-2014-03139 CVE-2014-3863 · GHSA-32fq-43mr-f4fp

Cross-site scripting (XSS) vulnerability in the JChatSocial component before 2.3 for…

LOW 24

Cross-site scripting (XSS) vulnerability in the JChatSocial component before 2.3 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the filename parameter in a file upload in an active JChat c…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01915 Published 2014-10-20 No fix listed CWE-79

TI-2025-30087 CVE-2025-47590 · GHSA-q746-3vhq-vv92

WordPress WPSpeed plugin <= 2.6.5 - Cross Site Request Forgery (CSRF) Vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in JExtensions Store WPSpeed wpspeed allows Cross Site Request Forgery.This issue affects WPSpeed: from n/a through <= 2.6.5.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00168 Published 2025-05-07 No fix listed CWE-352

Open these records in search →

Critical	1
High	0
Medium	2
Low	0
No CVSS	0