{"vulnerability": "cve-2026-9109", "sightings": [{"uuid": "eaf9c2db-288d-4764-991a-127c11ce4e9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-9109", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116741978443656575", "content": "\u26a0\ufe0f HIGH risk: GPTranslate plugin for WordPress (<=2.31) is vulnerable to stored XSS (CVE-2026-9109). Unauthenticated attackers can inject scripts through the exposed REST API. Disable or restrict access until a fix is released. https://radar.offseq.com/threat/cve-2026-9109-cwe-79-improper-neutralization-of-in-ff1b31ef #OffSeq #WordPress #XSS", "creation_timestamp": "2026-06-13T09:00:25.284931Z"}, {"uuid": "fe183b42-4ac8-422f-9575-7bfe5c32142f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-9109", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mo5vdj745l2x", "content": "GPTranslate for WordPress (<=2.31) hit by HIGH severity stored XSS (CVE-2026-9109). Unauthenticated attackers can inject scripts via REST API. Disable or restrict plugin until patched. https://radar.offseq.com/threat/cve-2026-9109-cwe-79-improper-neutralization-of-in-ff1b31ef #OffSeq #WordPress #XSS", "creation_timestamp": "2026-06-13T09:01:21.400845Z"}, {"uuid": "7ec90d66-502b-4ae6-b74f-beaea8aa59a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9109", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mo5xpx7rfc2t", "content": "CVE-2026-9109 - GPTranslate\nCVE ID : CVE-2026-9109\n \n Published : June 13, 2026, 7:16 a.m. | 23\u00a0minutes ago\n \n Description : The GPTranslate \u2013 Multilingual AI Translation for WordPress: Automatically Translate Websites plugin for WordPress is vulnerable to Stored Cross-Site Sc...", "creation_timestamp": "2026-06-13T09:44:36.931970Z"}, {"uuid": "aa1df1df-d5b8-449f-8778-af3de3939d52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9109", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mo64mw5fh52m", "content": "WordPress\u30d7\u30e9\u30b0\u30a4\u30f3GPTranslate\u306e\u5168\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u3001REST API\u7ffb\u8a33\u4fdd\u5b58\u306bStored XSS\u8106\u5f31\u6027\u3002\u7121\u8a8d\u8a3c\u653b\u6483\u8005\u306f\u3001\u4efb\u610f\u306e\u30b9\u30af\u30ea\u30d7\u30c8\u3092\u6ce8\u5165\u3057\u3001\u30e6\u30fc\u30b6\u30fc\u30a2\u30af\u30bb\u30b9\u6642\u306b\u5b9f\u884c\u3055\u305b\u308b\u53ef\u80fd\u2026\nCVE-2026-9109 CVSS 7.2 | HIGH", "creation_timestamp": "2026-06-13T11:10:57.997438Z"}, {"uuid": "f99395f4-cf93-4ad2-b43b-aa934e64b114", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9109", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mo6gp73avs2d", "content": "CVE-2026-9109 - Stored XSS in GPTranslate WordPress plugin. Unauthenticated attackers can inject scripts affecting all site visitors. CVSS 7.2. No patch available \u2013 disable or isolate immediately. #CVE #WordPress #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-9109/", "creation_timestamp": "2026-06-13T14:11:11.652035Z"}, {"uuid": "079ff5ba-8359-4bce-889e-5d9ead82ddda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91090", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/g5fc4mlnyhd2o", "content": "CVE-2026-91090 - GPAC base_scenegraph.c gf_node_activate_ex stack-based overflow\nCVE ID : CVE-2026-91090\n \n Published : Sept. 15, 2026, 7:30 a.m. | 33\u00a0minutes ago\n \n Description : A vulnerability was determined in GPAC up to f1219cde. The affected element is the function gf_no...", "creation_timestamp": "2026-09-15T08:47:30.046425Z"}, {"uuid": "791d3bf9-199a-45f6-8996-fddbce02b3e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91091", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ixbdriacgdxve", "content": "CVE-2026-91091 - GPAC Node Insertion base_scenegraph.c gf_node_list_insert_child memory corruption\nCVE ID : CVE-2026-91091\n \n Published : Sept. 15, 2026, 7:45 a.m. | 18\u00a0minutes ago\n \n Description : A vulnerability was identified in GPAC up to f1219cde. The impacted element is ...", "creation_timestamp": "2026-09-15T08:55:30.094314Z"}, {"uuid": "20f07fc0-4218-47a9-9660-1e60d66b2609", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91098", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvqn44u77b2j", "content": "CVE-2026-91098 - hp linux imaging and printing software (hplip)\nThe HP Linux Imaging and Printing (HPLIP) software contains several flaws that could let an attacker run code, gain higher privileges, crash the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#hp #Debian12 #CVE #infosec", "creation_timestamp": "2026-09-17T21:50:04.675114Z"}, {"uuid": "cad96022-287e-44d9-beac-5d787fc9a966", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91097", "type": "seen", "source": "https://t.me/GithubRedTeam/102976", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a HP-HPLIP-Mass-CVE-checker-2026-09-\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-21 19:46:26\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nMass check/research exploit for HP HPLIP CVE-2026-91097\u201391106 (<3.26.6), PAPPL :8000 IPP probes + hpssd templates\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-21T21:00:04.477237Z"}, {"uuid": "39a08cc9-39f1-4848-ab4b-75d089ee13f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91097", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102976", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a HP-HPLIP-Mass-CVE-checker-2026-09-\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-21 19:46:26\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nMass check/research exploit for HP HPLIP CVE-2026-91097\u201391106 (<3.26.6), PAPPL :8000 IPP probes + hpssd templates\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-22T00:00:09.176799Z"}, {"uuid": "6a5bc04e-96b3-4fae-b656-bde817e47d1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91097", "type": "seen", "source": "https://t.me/GithubRedTeam/102995", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-91097-CVE-2026-91106\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Nxploited\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-22 04:58:08\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nHPLIP < 3.26.6 \u2014 Full admin takeover via PAPPL web interface (no auth). Related to CVE-2026-91097 through CVE-2026-91106 (CVSS 9.3)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-22T06:00:04.563555Z"}, {"uuid": "719dd3f0-3063-4d84-b3eb-6cbf526e00a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91097", "type": "published-proof-of-concept", "source": "Telegram/dT7yXvodNHrxcxQnkvpf_sJjdaGRQYlSk9Plw9VoLoilrXc", "content": "", "creation_timestamp": "2026-09-22T07:00:04.621860Z"}]}