Threat Database

Threat Entry Updated 2026-11-07

Polylang - Security Vulnerability (CVE-2026-122670)

Missing Authorization vulnerability in WP SYNTEX Polylang polylang allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Polylang: from n/a through 3.9.

PLUGIN Polylang

CVE-2026-122670

MEDIUM CVSS 5.4 2026-11-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Polylang - Security Vulnerability (CVE-2026-39783)

Missing Authorization vulnerability in WP SYNTEX Polylang polylang allows Retrieve Embedded Sensitive Data.This issue affects Polylang: from n/a through 3.8.7.

PLUGIN Polylang

CVE-2026-39783

MEDIUM CVSS 4.3 2026-10-05

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Polylang - Security Vulnerability (CVE-2026-97279)

Contributor Cross Site Scripting (XSS) in Polylang

PLUGIN Polylang

CVE-2026-97279

MEDIUM CVSS 6.5 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-08-06

Polylang - Information Disclosure (CVE-2026-65458)

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Chouby Polylang and Chouby Polylang Pro allows Retrieve Embedded Sensitive Data. This issue affects Polylang: through 3.8.5; Polylang Pro: through 3.8.5.

PLUGIN Polylang

CVE-2026-65458

MEDIUM CVSS 4.3 2026-07-23

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Polylang - PHP Object Injection (CVE-2025-64353)

Deserialization of Untrusted Data vulnerability in Chouby Polylang polylang allows Object Injection.This issue affects Polylang: from n/a through

PLUGIN Polylang

CVE-2025-64353

HIGH CVSS 8.8 2025-10-31

Risk Score

Open Full Technical Breakdown