https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T02:53:30.285193+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-384490 EUVD-2026-384490 2026-10-18T02:53:30.324743+00:00 EUVD-2026-384490 https://cve.radiocsirt.org/vuln/fkie_cve-2026-103309 fkie_cve-2026-103309 2026-10-18T02:53:30.324783+00:00

The GPTranslate WordPress plugin before 2.34.14 does not properly restrict who can store translations, and does not escape them when outputting them in translated pages, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks when server-side translations are enabled.

 https://cve.radiocsirt.org/vuln/ghsa-5r7v-q722-2v82 GHSA-5r7v-q722-2v82 2026-10-18T02:53:30.324818+00:00

The GPTranslate WordPress plugin before 2.34.14 does not properly restrict who can store translations, and does not escape them when outputting them in translated pages, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks when server-side translations are enabled.