The wpCentral plugin prior to 1.5.1 for WordPress allows disclosure of the connection key.
wpcentral wpcentral