{"uuid": "f7e1c294-7f3e-4e3f-aee8-3ca0f6464e56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89412", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117357757889784218", "content": "CVE-2026-89412: Stored XSS in TranslatePress WordPress plugin up to 3.3.5. CVSS 7.2. Unauthenticated attackers can inject scripts via the Translation Memory Suggestion Panel. Patch under review - update as soon as it lands. https://www.valtersit.com/cve/CVE-2026-89412/ #CVE #WordPress #infosec", "creation_timestamp": "2026-09-30T03:01:13.314859Z"}