Read the docs

Webilop

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Webilop records in CISA KEV

No Webilop vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2025-31179 CVE-2025-49064 · GHSA-578w-94fj-8394

WordPress User Language Switch plugin <= 1.6.10 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Webilop User Language Switch user-language-switch allows Reflected XSS.This issue affects User Language Switch: from n…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00249 Published 2025-08-14 No fix listed CWE-79
TI-2025-20190 CVE-2025-27343 · GHSA-889g-6x77-qwm5

WordPress WooCommerce HTML5 Video Plugin <= 1.7.10 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Webilop WooCommerce HTML5 Video woocommerce-html5-video allows Reflected XSS.This issue affects WooCommerce HTML5 Vide…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00293 Published 2025-04-17 No fix listed CWE-79
TI-2026-00531 CVE-2026-0745 · GHSA-m38c-5p3m-p7gm

Server-side request forgery in Webilop User Language Switch

Priority LOW 25

The User Language Switch plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.6.10 due to missing URL validation on the 'download_language()' function.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00377 Published 2026-02-14 No fix listed CWE-918
TI-2026-00522 CVE-2026-0735 · GHSA-r8hc-3q2v-m9fj

Cross-site scripting in Webilop User Language Switch

Priority LOW 20

The User Language Switch plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tab_color_picker_language_switch' parameter in all versions up to, and including, 1.6.10 due to insufficient input sanit…

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00276 Published 2026-02-14 No fix listed CWE-79
Open these records in search →