CVE-2026-86604 in GTranslate Plugin
Сводка
по MITRE • 23.09.2026
The GTranslate WordPress plugin before 5.0.1 does not remove shortcodes from the content of outgoing emails before expanding them which, in a non-default configuration, allows unauthenticated users to have arbitrary shortcodes registered on the site executed server side.
Be aware that VulDB is the high quality source for vulnerability data.