TI-2026-64011 CVE-2026-97279 · GHSA-2724-v6vq-383j
WordPress Polylang plugin <= 3.8.9 - Cross Site Scripting (XSS) vulnerability
Priority LOW 28
Contributor Cross Site Scripting (XSS) in Polylang <= 3.8.9 versions.
Vulnerabilities
3 records
TI-2026-46629 CVE-2026-65458 · GHSA-gmph-4533-hxfg
WordPress Polylang and Polylang Pro plugins <= 3.8.5 - Sensitive Data Exposure vulnerability
Priority LOW 20
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Chouby Polylang and Chouby Polylang Pro allows Retrieve Embedded Sensitive Data.
TI-2025-39786 CVE-2025-64353 · GHSA-hp28-jqch-qhrc
WordPress Polylang plugin <= 3.7.3 - Deserialization of untrusted data vulnerability
Priority MEDIUM 40
Deserialization of Untrusted Data vulnerability in Chouby Polylang polylang allows Object Injection.This issue affects Polylang: from n/a through <= 3.7.3.