Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: john-dagelmore Clear all filters
TI-2026-86490 CVE-2026-118784 · GHSA-jhr8-3vqj-g7jj

Stored cross-site scripting in WPSpeed via display names

Priority LOW 28

The WPSpeed plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.6.10 This is due to a combination of two issues in the LightImages HTML optimizer: (1) Dispatcher::runOpti…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00297 Published 2026-11-07 No fix listed CWE-79
TI-2026-60447 CVE-2026-89278 · GHSA-rm6m-h4m2-65r3

GPTranslate <= 2.34.6 - Unauthenticated Sensitive Information Exposure in Public Frontend Inline Script

Priority LOW 30

The GPTranslate – Multilingual AI Translation Agent for WordPress: Translate Your Site with AI plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.34.6 via the enq…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00438 Published 2026-09-18 No fix listed CWE-200
TI-2026-08006 CVE-2026-9109 · GHSA-j66v-hr5c-cjh2

GPTranslate <= 2.31 - Unauthenticated Stored Cross-Site Scripting via REST API Translation Storage

Priority LOW 37

The GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API Translation Storage in all versions up to, and…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00316 Published 2026-06-13 No fix listed CWE-79