Answer in brief
CVE-2026-89278 records a Medium severity (CVSS 5.3) vulnerability in GPTranslate <= 2.34.6 - Unauthenticated Sensitive Information Exposure in Public Frontend Inline Script. The current sources do not mark it as known exploited. The current feed maps john-dagelmore/GPTranslate – Multilingual AI Translation Agent for WordPress: Translate Your Site with AI (generic), john-dagelmore/GPTranslate – Multilingual AI Translation Agent for WordPress: Translate Your Site with AI (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 5.3. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps john-dagelmore/GPTranslate – Multilingual AI Translation Agent for WordPress: Translate Your Site with AI (generic), john-dagelmore/GPTranslate – Multilingual AI Translation Agent for WordPress: Translate Your Site with AI (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| john-dagelmore/GPTranslate – Multilingual AI Translation Agent for WordPress: Translate Your Site with AIgeneric | 0 | Not reported |
| john-dagelmore/GPTranslate – Multilingual AI Translation Agent for WordPress: Translate Your Site with AIgeneric | >=0 <=2.34.6 | Not reported |
Published upstream
Sep 18, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Sep 18, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Sep 18, 2026
The GPTranslate – Multilingual AI Translation Agent for WordPress: Translate Your Site with AI plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.34.6 via the enqueue_frontend_scripts. This makes it possible for unauthenticated attackers to extract the plaintext third-party AI provider API key (OpenAI, DeepL, xAI/Grok, Gemini, Claude, or Google Cloud Translation) — a credential granting billed account access — by fetching any public page and applying the inverse transformation bundled in the plugin's own public JavaScript asset. This exposure affects the default configuration (gpt-3.5-turbo in client mode) and all supported non-DeepSeek providers; only deepseek-* models and gpt-* models configured in server-proxy mode correctly suppress key emission.
Quoted source text, attributed separately from HOL analysis.