Read the docs

WP SYNTEX

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

WP SYNTEX records in CISA KEV

No WP SYNTEX vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-73916 CVE-2026-97278 · GHSA-qr9f-p3hp-mggj

PHP object injection in WordPress Polylang plugin

Priority LOW 34

Deserialization of Untrusted Data vulnerability in WP SYNTEX Polylang polylang allows Object Injection.This issue affects Polylang: from n/a through 3.8.9.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00425 Published 2026-10-14 No fix listed CWE-502
TI-2026-86158 CVE-2026-122670 · GHSA-rxrf-wcmf-c8v4

Missing authorization in WordPress Polylang plugin

Priority LOW 24

Missing Authorization vulnerability in WP SYNTEX Polylang polylang allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Polylang: from n/a through 3.9.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00179 Published 2026-11-06 No fix listed CWE-862
TI-2026-67598 CVE-2026-39783 · GHSA-4h7h-j3wr-4pjm

Missing authorization in WordPress Polylang exposes sensitive data

Priority LOW 19

Missing Authorization vulnerability in WP SYNTEX Polylang polylang allows Retrieve Embedded Sensitive Data.This issue affects Polylang: from n/a through 3.8.7.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00162 Published 2026-10-05 No fix listed CWE-862
Open these records in search →