TI-2026-39608 CVE-2026-54805 · GHSA-ch7m-79px-p832
WordPress Falang multilanguage plugin <= 1.4.2 - Privilege Escalation vulnerability
Priority MEDIUM 40
Subscriber Privilege Escalation in Falang multilanguage <= 1.4.2 versions.
sbouey
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
sbouey records in CISA KEVNo sbouey vulnerabilities are listed in CISA KEV.
Records
5 records
TI-2025-36287 CVE-2025-58619 · GHSA-5376-r6x9-788p
WordPress Falang multilanguage Plugin <= 1.3.65 - PHP Object Injection Vulnerability
Priority MEDIUM 40
Deserialization of Untrusted Data vulnerability in sbouey Falang multilanguage falang allows Object Injection.This issue affects Falang multilanguage: from n/a through <= 1.3.65.
TI-2024-04108 CVE-2024-4417 · GHSA-x92j-58cf-374g
Falang multilanguage for WordPress <= 1.3.49 - Authenticated (Administrator+) Stored Cross-Site Scripting
Priority LOW 20
The Falang multilanguage for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.3.49 due to insufficient input sanitization and output e…
TI-2025-30611 CVE-2025-48285 · GHSA-pvr2-jc9j-hvv3
WordPress Falang multilanguage plugin <= 1.3.61 - Cross Site Request Forgery (CSRF) Vulnerability
Priority LOW 19
Cross-Site Request Forgery (CSRF) vulnerability in sbouey Falang multilanguage falang allows Cross Site Request Forgery.This issue affects Falang multilanguage: from n/a through <= 1.3.61.
TI-2024-24755 CVE-2024-37240 · GHSA-4777-367v-cc98
WordPress Falang multilanguage for WordPress plugin <= 1.3.51 - Cross Site Request Forgery (CSRF) vulnerability
Priority LOW 19
Cross-Site Request Forgery (CSRF) vulnerability in sbouey Falang multilanguage falang allows Cross Site Request Forgery.This issue affects Falang multilanguage: from n/a through <= 1.3.51.