Read the docs

john-dagelmore

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

john-dagelmore records in CISA KEV

No john-dagelmore vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-08006 CVE-2026-9109 · GHSA-j66v-hr5c-cjh2

GPTranslate <= 2.31 - Unauthenticated Stored Cross-Site Scripting via REST API Translation Storage

Priority LOW 37

The GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API Translation Storage in all versions up to, and…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00316 Published 2026-06-13 No fix listed CWE-79
TI-2026-60447 CVE-2026-89278 · GHSA-rm6m-h4m2-65r3

GPTranslate <= 2.34.6 - Unauthenticated Sensitive Information Exposure in Public Frontend Inline Script

Priority LOW 30

The GPTranslate – Multilingual AI Translation Agent for WordPress: Translate Your Site with AI plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.34.6 via the enq…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00438 Published 2026-09-18 No fix listed CWE-200
TI-2026-86490 CVE-2026-118784 · GHSA-jhr8-3vqj-g7jj

Stored cross-site scripting in WPSpeed via display names

Priority LOW 28

The WPSpeed plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.6.10 This is due to a combination of two issues in the LightImages HTML optimizer: (1) Dispatcher::runOpti…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00331 Published 2026-11-07 No fix listed CWE-79
Open these records in search →