CVE-2026-49776

CVE

Threat entity extracted from intelligence sources

Frequency

3

occurrences

First Seen

June 16, 2026

Last Seen

June 16, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical SQL Injection Vulnerability in GPTranslate Plugin (CVE-2026-49776)79.5

A critical unauthenticated SQL injection vulnerability (CVE-2026-49776) has been identified in the GPTranslate plugin for WordPress, affecting versions 2.32.6 and earlier. This flaw allows attackers to execute arbitrary SQL queries through user-controlled input, potentially exposing sensitive data s...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical SQL Injection Vulnerability in GPTranslate Plugin (CVE-2026-49776)

Jun 16·3 sources

Related Articles (3)

CVE-2026-49776 AKAOMA CVE VULNERABILITIES / 12h Unauthenticated SQL Injection in GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websites <= 2.32.6 versions.

cve.akaoma.com·Jun 16

CVE-2026-49776 TheHackerWire / 8h Attack Vector How the vulnerability can be exploited Network 9.3 CVSS Score Critical

www.thehackerwire.com·Jun 16

CVE-2026-49776 - Exploits & Severity

Related Entities

Sql Injection Cwe-89 - SQL Injection T1190 - Exploit Public-Facing Application WordPress GPTranslate