Vulnerabilities

TI-2026-36685 CVE-2026-49776 · GHSA-2f68-qpff-692q

SQL injection in JExtensions Store GPTranslate – Multilingual AI Translation for…

MEDIUM 46

Unauthenticated SQL Injection in GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websites <= 2.32.6 versions.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00289 Published 2026-06-15 No fix listed CWE-89

TI-2025-30087 CVE-2025-47590 · GHSA-q746-3vhq-vv92

WordPress WPSpeed plugin <= 2.6.5 - Cross Site Request Forgery (CSRF) Vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in JExtensions Store WPSpeed wpspeed allows Cross Site Request Forgery.This issue affects WPSpeed: from n/a through <= 2.6.5.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00168 Published 2025-05-07 No fix listed CWE-352

TI-2014-03139 CVE-2014-3863 · GHSA-32fq-43mr-f4fp

Cross-site scripting (XSS) vulnerability in the JChatSocial component before 2.3 for…

LOW 24

Cross-site scripting (XSS) vulnerability in the JChatSocial component before 2.3 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the filename parameter in a file upload in an active JChat c…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01915 Published 2014-10-20 No fix listed CWE-79

Vulnerabilities

Filters

SQL injection in JExtensions Store GPTranslate – Multilingual AI Translation for…

WordPress WPSpeed plugin <= 2.6.5 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-site scripting (XSS) vulnerability in the JChatSocial component before 2.3 for…