{"vulnerability": "CVE-2026-89278", "sightings": [{"uuid": "827affc7-e90c-4803-b4de-3ed07901103b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89278", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mvrlwsetil22", "content": "CVE-2026-89278: The GPTranslate plugin for WordPress by john-dagelmore exposes plaintext third-party AI provider API keys to unauthenticated visitors in versions up to and including 2.34.6. No fixed version is listed; affected sites should rotate exposed keys.", "creation_timestamp": "2026-09-18T07:01:52.120684Z"}]}